Skip to content

Internal validation failure - first part #543 #548

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
oliveregger merged 1 commit into from
Aug 3, 2026
Merged

Internal validation failure - first part #543 #548

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions docs/changelog.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ Unreleased
- Added the parameter `matchbox.fhir.context.ssrfProtectionEnabled` to control the new HAPI SSRF protection mechanism
- Update HAPI FHIR to 8.10.1
- Fix the GUI not able to send resources larger than 64 KiB (#542)
- Fix requests larger than 2 MiB being rejected by Undertow (`UT000020`): the maximum request body size is now 100 MB, configurable with `server.undertow.max-http-post-size` (#543)

2026/07/01 Release 4.1.11

Expand Down
10 changes: 10 additions & 0 deletions docs/matchbox-server.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,16 @@ hapi:
Some more configuration parameters used by validation are described in the
[Validation](validation.md#configuration-parameters) page.

### Maximum request size

Matchbox runs on Undertow, which rejects request bodies larger than 2 MiB by default with
`RequestTooBigException: UT000020: Connection terminated as request was larger than 2097152`.
Matchbox raises that limit to 100 MB; if you have to send larger resources, increase
`server.undertow.max-http-post-size` (e.g. with the environment variable
`SERVER_UNDERTOW_MAX_HTTP_POST_SIZE`). The value must be positive, Undertow cannot be configured for
unlimited request bodies through Spring Boot. Note that a reverse proxy in front of Matchbox may
enforce its own, smaller limit.

## Read-only mode {: #read-only}

When enabling `httpReadOnly`, the server will reject any operation that would modify its state.
Expand Down
6 changes: 6 additions & 0 deletions matchbox-server/src/main/resources/application.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,12 @@ spring:
server:
servlet:
context-path: /matchboxv3
undertow:
# Undertow rejects request bodies larger than 2 MiB by default (UndertowOptions.MAX_ENTITY_SIZE),
# which is too small for FHIR resources such as documents or large bundles. Override with the
# environment variable SERVER_UNDERTOW_MAX_HTTP_POST_SIZE if needed; the value must be positive,
# Undertow cannot be configured for unlimited request bodies through Spring Boot.
max-http-post-size: 100MB
management:
endpoint:
health:
Expand Down
Loading