[twobob]

hmm... yeah. possibly so. check out if wildcards work

or dynamically override the check perhaps (might be possible via a deep java hack / class override)

create a service that lives on one URL (localhost??) that can unroll the requests to other urls.

use a json solution to get other URL data and fiddle with the security of that.

offload the requests to other URLs to something else like curl? something external to whatever scope is limiting your request.

the list goes on...

You get the idea

(gimme a worked "for example" of an item you want to get, for better input)