How to hide WAR from eyes?

Question

Java

Hello.
There is a Jboss 7 application deployed on it, any ideas how to transfer full access to the customer but at the same time hide the war / ear archive as much as possible, it is ideal for Jboss to deploy war remotely (pick up from a remote server) by key?
Is it necessary to prevent sorts from leaking but to give root to 3rd parties on the server?
Is it possible?

Answer 1

So jboss (which is now wildfly), and indeed, almost all appservers, in any case, unzip the contents of the jar / ear to themselves. A good way to hide all of this is to embed the server in a jar (jetty integrates nicely, everything is run from a simple jar that you can pack the contents of a webapp into). You can also attach encryption and a bootloader to this thing, which will unpack the encrypted archive on the fly (you can even into RAM) and launch the application. Getting the .class files and webapp content is still possible, but more difficult.