Add customizer and property support for configuring Jackson factories

Closes gh-34709

Author: wilkinsona

documentation/spring-boot-docs/src/docs/antora/modules/how-to/pages/spring-mvc.adoc

@@ -108,6 +108,8 @@ To ease the migration when working on an application that previously used Jackso
 
 The context's javadoc:tools.jackson.databind.json.JsonMapper$Builder[] can be customized by one or more javadoc:org.springframework.boot.jackson.autoconfigure.JsonMapperBuilderCustomizer[] beans.
 Such customizer beans can be ordered (Boot's own customizer has an order of 0), letting additional customization be applied both before and after Boot's customization.
+Furthermore, the `JsonFactory` used by the builder and the mapper that it creates can be customized by one or more javadoc:org.springframework.boot.jackson.autoconfigure.JsonFactoryBuilderCustomizer[] beans.
+Various `spring.jackson.factory` properties can also be used to configure the factory.
 
 Any beans of type javadoc:tools.jackson.databind.JacksonModule[] are automatically registered with the auto-configured javadoc:tools.jackson.databind.json.JsonMapper$Builder[] and are applied to any javadoc:tools.jackson.databind.json.JsonMapper[] instances that it creates.
 This provides an application-wide mechanism for contributing custom modules when you add new features to your application.

module/spring-boot-jackson/src/main/java/org/springframework/boot/jackson/autoconfigure/CborFactoryBuilderCustomizer.java

@@ -0,0 +1,39 @@
+/*
+ * Copyright 2012-present the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.springframework.boot.jackson.autoconfigure;
+
+import tools.jackson.dataformat.cbor.CBORFactory;
+import tools.jackson.dataformat.cbor.CBORFactoryBuilder;
+
+/**
+ * Callback interface that can be implemented by beans wishing to further customize the
+ * {@link CBORFactory} through {@link CBORFactoryBuilder} to fine-tune its
+ * auto-configuration.
+ *
+ * @author Andy Wilkinson
+ * @since 4.1.0
+ */
+@FunctionalInterface
+public interface CborFactoryBuilderCustomizer {
+
+	/**
+	 * Customize the CBORFactoryBuilder.
+	 * @param cborFactoryBuilder the builder to customize
+	 */
+	void customize(CBORFactoryBuilder cborFactoryBuilder);
+
+}

module/spring-boot-jackson/src/main/java/org/springframework/boot/jackson/autoconfigure/JacksonAutoConfiguration.java

@@ -32,6 +32,11 @@
 import com.fasterxml.jackson.annotation.JsonInclude.Include;
 import com.fasterxml.jackson.annotation.PropertyAccessor;
 import org.jspecify.annotations.Nullable;
+import tools.jackson.core.StreamReadConstraints;
+import tools.jackson.core.StreamWriteConstraints;
+import tools.jackson.core.base.DecorableTSFactory.DecorableTSFBuilder;
+import tools.jackson.core.json.JsonFactory;
+import tools.jackson.core.json.JsonFactoryBuilder;
 import tools.jackson.databind.JacksonModule;
 import tools.jackson.databind.ObjectMapper;
 import tools.jackson.databind.PropertyNamingStrategies;
@@ -40,7 +45,11 @@
 import tools.jackson.databind.cfg.DateTimeFeature;
 import tools.jackson.databind.cfg.MapperBuilder;
 import tools.jackson.databind.json.JsonMapper;
+import tools.jackson.dataformat.cbor.CBORFactory;
+import tools.jackson.dataformat.cbor.CBORFactoryBuilder;
 import tools.jackson.dataformat.cbor.CBORMapper;
+import tools.jackson.dataformat.xml.XmlFactory;
+import tools.jackson.dataformat.xml.XmlFactoryBuilder;
 import tools.jackson.dataformat.xml.XmlMapper;
 
 import org.springframework.aot.hint.ReflectionHints;
@@ -55,10 +64,14 @@
 import org.springframework.boot.autoconfigure.condition.ConditionalOnClass;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
 import org.springframework.boot.context.properties.EnableConfigurationProperties;
+import org.springframework.boot.context.properties.PropertyMapper;
 import org.springframework.boot.jackson.JacksonComponentModule;
 import org.springframework.boot.jackson.JacksonMixinModule;
 import org.springframework.boot.jackson.JacksonMixinModuleEntries;
 import org.springframework.boot.jackson.autoconfigure.JacksonProperties.ConstructorDetectorStrategy;
+import org.springframework.boot.jackson.autoconfigure.JacksonProperties.Factory.Constraints;
+import org.springframework.boot.jackson.autoconfigure.JacksonProperties.Factory.Constraints.Read;
+import org.springframework.boot.jackson.autoconfigure.JacksonProperties.Factory.Constraints.Write;
 import org.springframework.context.ApplicationContext;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
@@ -94,11 +107,21 @@ JacksonComponentModule jsonComponentModule() {
 		return new JacksonComponentModule();
 	}
 
+	@Bean
+	@ConditionalOnMissingBean
+	JsonFactory jsonFactory(List<JsonFactoryBuilderCustomizer> customizers) {
+		JsonFactoryBuilder builder = JsonFactory.builder();
+		for (JsonFactoryBuilderCustomizer customizer : customizers) {
+			customizer.customize(builder);
+		}
+		return builder.build();
+	}
+
 	@Bean
 	@Scope(ConfigurableBeanFactory.SCOPE_PROTOTYPE)
 	@ConditionalOnMissingBean
-	JsonMapper.Builder jsonMapperBuilder(List<JsonMapperBuilderCustomizer> customizers) {
-		JsonMapper.Builder builder = JsonMapper.builder();
+	JsonMapper.Builder jsonMapperBuilder(List<JsonMapperBuilderCustomizer> customizers, JsonFactory jsonFactory) {
+		JsonMapper.Builder builder = JsonMapper.builder(jsonFactory);
 		customize(builder, customizers);
 		return builder;
 	}
@@ -137,12 +160,36 @@ JacksonMixinModule jacksonMixinModule(ApplicationContext context, JacksonMixinMo
 
 	@Configuration(proxyBeanMethods = false)
 	@EnableConfigurationProperties(JacksonProperties.class)
-	static class JacksonJsonMapperBuilderCustomizerConfiguration {
+	static class JacksonJsonCustomizerConfiguration {
+
+		private final JacksonProperties jacksonProperties;
+
+		JacksonJsonCustomizerConfiguration(JacksonProperties jacksonProperties) {
+			this.jacksonProperties = jacksonProperties;
+		}
 
 		@Bean
-		StandardJsonMapperBuilderCustomizer standardJsonMapperBuilderCustomizer(JacksonProperties jacksonProperties,
-				ObjectProvider<JacksonModule> modules) {
-			return new StandardJsonMapperBuilderCustomizer(jacksonProperties, modules.stream().toList());
+		StandardJsonFactoryBuilderCustomizer standardJsonFactoryBuilderCustomizer() {
+			return new StandardJsonFactoryBuilderCustomizer(this.jacksonProperties);
+		}
+
+		@Bean
+		StandardJsonMapperBuilderCustomizer standardJsonMapperBuilderCustomizer(ObjectProvider<JacksonModule> modules) {
+			return new StandardJsonMapperBuilderCustomizer(this.jacksonProperties, modules.stream().toList());
+		}
+
+		static final class StandardJsonFactoryBuilderCustomizer
+				extends AbstractFactoryBuilderCustomizer<JsonFactoryBuilder> implements JsonFactoryBuilderCustomizer {
+
+			StandardJsonFactoryBuilderCustomizer(JacksonProperties jacksonProperties) {
+				super(jacksonProperties);
+			}
+
+			@Override
+			public void customize(JsonFactoryBuilder jsonFactoryBuilder) {
+				super.customize(jsonFactoryBuilder);
+			}
+
 		}
 
 		static final class StandardJsonMapperBuilderCustomizer
@@ -189,17 +236,27 @@ public void customize(JsonMapper.Builder builder) {
 	@EnableConfigurationProperties(JacksonCborProperties.class)
 	static class CborConfiguration {
 
+		private final JacksonProperties jacksonProperties;
+
+		CborConfiguration(JacksonProperties jacksonProperties) {
+			this.jacksonProperties = jacksonProperties;
+		}
+
 		@Bean
 		@ConditionalOnMissingBean
-		CBORMapper cborMapper(CBORMapper.Builder builder) {
+		CBORFactory cborFactory(List<CborFactoryBuilderCustomizer> customizers) {
+			CBORFactoryBuilder builder = CBORFactory.builder();
+			for (CborFactoryBuilderCustomizer customizer : customizers) {
+				customizer.customize(builder);
+			}
 			return builder.build();
 		}
 
 		@Bean
 		@Scope(ConfigurableBeanFactory.SCOPE_PROTOTYPE)
 		@ConditionalOnMissingBean
-		CBORMapper.Builder cborMapperBuilder(List<CborMapperBuilderCustomizer> customizers) {
-			CBORMapper.Builder builder = CBORMapper.builder();
+		CBORMapper.Builder cborMapperBuilder(CBORFactory factory, List<CborMapperBuilderCustomizer> customizers) {
+			CBORMapper.Builder builder = CBORMapper.builder(factory);
 			customize(builder, customizers);
 			return builder;
 		}
@@ -211,12 +268,37 @@ private void customize(CBORMapper.Builder builder, List<CborMapperBuilderCustomi
 		}
 
 		@Bean
-		StandardCborMapperBuilderCustomizer standardCborMapperBuilderCustomizer(JacksonProperties jacksonProperties,
-				ObjectProvider<JacksonModule> modules, JacksonCborProperties cborProperties) {
-			return new StandardCborMapperBuilderCustomizer(jacksonProperties, modules.stream().toList(),
+		@ConditionalOnMissingBean
+		CBORMapper cborMapper(CBORMapper.Builder builder) {
+			return builder.build();
+		}
+
+		@Bean
+		StandardCborFactoryBuilderCustomizer standardCborFactoryBuilderCustomizer() {
+			return new StandardCborFactoryBuilderCustomizer(this.jacksonProperties);
+		}
+
+		@Bean
+		StandardCborMapperBuilderCustomizer standardCborMapperBuilderCustomizer(ObjectProvider<JacksonModule> modules,
+				JacksonCborProperties cborProperties) {
+			return new StandardCborMapperBuilderCustomizer(this.jacksonProperties, modules.stream().toList(),
 					cborProperties);
 		}
 
+		static final class StandardCborFactoryBuilderCustomizer
+				extends AbstractFactoryBuilderCustomizer<CBORFactoryBuilder> implements CborFactoryBuilderCustomizer {
+
+			StandardCborFactoryBuilderCustomizer(JacksonProperties jacksonProperties) {
+				super(jacksonProperties);
+			}
+
+			@Override
+			public void customize(CBORFactoryBuilder cborFactoryBuilder) {
+				super.customize(cborFactoryBuilder);
+			}
+
+		}
+
 		static class StandardCborMapperBuilderCustomizer extends AbstractMapperBuilderCustomizer<CBORMapper.Builder>
 				implements CborMapperBuilderCustomizer {
 
@@ -244,17 +326,27 @@ public void customize(CBORMapper.Builder builder) {
 	@EnableConfigurationProperties(JacksonXmlProperties.class)
 	static class XmlConfiguration {
 
+		private final JacksonProperties jacksonProperties;
+
+		XmlConfiguration(JacksonProperties jacksonProperties) {
+			this.jacksonProperties = jacksonProperties;
+		}
+
 		@Bean
 		@ConditionalOnMissingBean
-		XmlMapper xmlMapper(XmlMapper.Builder builder) {
+		XmlFactory xmlFactory(List<XmlFactoryBuilderCustomizer> customizers) {
+			XmlFactoryBuilder builder = XmlFactory.builder();
+			for (XmlFactoryBuilderCustomizer customizer : customizers) {
+				customizer.customize(builder);
+			}
 			return builder.build();
 		}
 
 		@Bean
 		@Scope(ConfigurableBeanFactory.SCOPE_PROTOTYPE)
 		@ConditionalOnMissingBean
-		XmlMapper.Builder xmlMapperBuilder(List<XmlMapperBuilderCustomizer> customizers) {
-			XmlMapper.Builder builder = XmlMapper.builder();
+		XmlMapper.Builder xmlMapperBuilder(XmlFactory xmlFactory, List<XmlMapperBuilderCustomizer> customizers) {
+			XmlMapper.Builder builder = XmlMapper.builder(xmlFactory);
 			customize(builder, customizers);
 			return builder;
 		}
@@ -266,9 +358,21 @@ private void customize(XmlMapper.Builder builder, List<XmlMapperBuilderCustomize
 		}
 
 		@Bean
-		StandardXmlMapperBuilderCustomizer standardXmlMapperBuilderCustomizer(JacksonProperties jacksonProperties,
-				ObjectProvider<JacksonModule> modules, JacksonXmlProperties xmlProperties) {
-			return new StandardXmlMapperBuilderCustomizer(jacksonProperties, modules.stream().toList(), xmlProperties);
+		@ConditionalOnMissingBean
+		XmlMapper xmlMapper(XmlMapper.Builder builder) {
+			return builder.build();
+		}
+
+		@Bean
+		StandardXmlFactoryBuilderCustomizer standardXmlFactoryBuilderCustomizer() {
+			return new StandardXmlFactoryBuilderCustomizer(this.jacksonProperties);
+		}
+
+		@Bean
+		StandardXmlMapperBuilderCustomizer standardXmlMapperBuilderCustomizer(ObjectProvider<JacksonModule> modules,
+				JacksonXmlProperties xmlProperties) {
+			return new StandardXmlMapperBuilderCustomizer(this.jacksonProperties, modules.stream().toList(),
+					xmlProperties);
 		}
 
 		@Configuration(proxyBeanMethods = false)
@@ -291,6 +395,20 @@ public void customize(XmlMapper.Builder builder) {
 
 		}
 
+		static final class StandardXmlFactoryBuilderCustomizer
+				extends AbstractFactoryBuilderCustomizer<XmlFactoryBuilder> implements XmlFactoryBuilderCustomizer {
+
+			StandardXmlFactoryBuilderCustomizer(JacksonProperties jacksonProperties) {
+				super(jacksonProperties);
+			}
+
+			@Override
+			public void customize(XmlFactoryBuilder xmlFactoryBuilder) {
+				super.customize(xmlFactoryBuilder);
+			}
+
+		}
+
 		static class StandardXmlMapperBuilderCustomizer extends AbstractMapperBuilderCustomizer<XmlMapper.Builder>
 				implements XmlMapperBuilderCustomizer {
 
@@ -344,6 +462,46 @@ private boolean isPropertyNamingStrategyField(Field candidate) {
 
 	}
 
+	abstract static class AbstractFactoryBuilderCustomizer<B extends DecorableTSFBuilder<?, ?>> implements Ordered {
+
+		private final JacksonProperties jacksonProperties;
+
+		AbstractFactoryBuilderCustomizer(JacksonProperties jacksonProperties) {
+			this.jacksonProperties = jacksonProperties;
+		}
+
+		@Override
+		public int getOrder() {
+			return 0;
+		}
+
+		protected void customize(B builder) {
+			Constraints constraints = this.jacksonProperties.getFactory().getConstraints();
+			builder.streamReadConstraints(readConstraintsFrom(constraints.getRead()));
+			builder.streamWriteConstraints(writeConstraintsFrom(constraints.getWrite()));
+		}
+
+		private StreamReadConstraints readConstraintsFrom(Read read) {
+			PropertyMapper map = PropertyMapper.get();
+			StreamReadConstraints.Builder constraintsBuilder = StreamReadConstraints.builder();
+			map.from(read::getMaxDocumentLength).to(constraintsBuilder::maxDocumentLength);
+			map.from(read::getMaxNameLength).to(constraintsBuilder::maxNameLength);
+			map.from(read::getMaxNestingDepth).to(constraintsBuilder::maxNestingDepth);
+			map.from(read::getMaxNumberLength).to(constraintsBuilder::maxNumberLength);
+			map.from(read::getMaxStringLength).to(constraintsBuilder::maxStringLength);
+			map.from(read::getMaxTokenCount).to(constraintsBuilder::maxTokenCount);
+			return constraintsBuilder.build();
+		}
+
+		private StreamWriteConstraints writeConstraintsFrom(Write write) {
+			PropertyMapper map = PropertyMapper.get();
+			StreamWriteConstraints.Builder constraintsBuilder = StreamWriteConstraints.builder();
+			map.from(write::getMaxNestingDepth).to(constraintsBuilder::maxNestingDepth);
+			return constraintsBuilder.build();
+		}
+
+	}
+
 	abstract static class AbstractMapperBuilderCustomizer<B extends MapperBuilder<?, ?>> implements Ordered {
 
 		private final JacksonProperties jacksonProperties;