审计用户 ID，restful web 服务中的服务

Question

在我们的应用程序中，我们有几个 webservices.i 需要获取我需要存储的用于审计目的的用户标识（意味着谁已经登录和网络服务名称）。谁能建议过滤器链或拦截器以及如何获取网络服务名称。

Answer 1

您可以使用 PreSecurityInterceptor 来执行此操作，来自客户端的请求将首先转到它，您可以在数据库或文件中记录数据。

import java.util.Date;

import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.WebApplicationException;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.Response;
import javax.ws.rs.ext.Provider;

/**
 * This interceptor verify the method name  and log the details
 * */
import org.jboss.resteasy.annotations.interception.ServerInterceptor;
import org.jboss.resteasy.core.ResourceMethod;
//import org.jboss.resteasy.core.ResourceMethodInvoker;
import org.jboss.resteasy.core.ServerResponse;
import org.jboss.resteasy.spi.Failure;
import org.jboss.resteasy.spi.HttpRequest;
import org.jboss.resteasy.spi.interception.PreProcessInterceptor;

@Provider
@ServerInterceptor
public class PreSecurityInterceptor implements PreProcessInterceptor {
    @Context HttpServletRequest req;

    @Override
    public ServerResponse preProcess(HttpRequest request, ResourceMethod method)
            throws Failure, WebApplicationException {

        System.out.println("********************************************* pre process *****************************");

        System.out.println(new Date() + " Method : " + method.getMethod().getName() + " being called from  "
                + req.getRemoteHost()+":"+req.getLocalPort()+": Remote Port "+req.getRemotePort());

         if ( "defaultMethod".equalsIgnoreCase(method.getMethod().getName())) {
            return null; // normal flow continues
        } else {
            System.out.println(new Date() + " Method : " + method.getMethod().getName() + " Precondition failed ");
            return (ServerResponse) Response
                    .status(Response.Status.PRECONDITION_FAILED).entity("invalid method details provided !!").build();
        }  
    }
}

审计用户 ID，restful web 服务中的服务

Auditing the userids ,services in restfull webservices

java

spring-restcontroller