Question

在我们的应用程序中，我们有几个webservices.i需要获取用户ID（意味着谁已经插入和webservice名称）用于我需要存储的审计目的。任何人都可以建议哪个将是过滤器链或拦截器以及如何获取Web服务名称。

Answer 1

您可以使用PreSecurityInterceptor执行此操作，来自客户端的请求将首先转到它，您可以在数据库或文件中记录数据。

import java.util.Date;

import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.WebApplicationException;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.Response;
import javax.ws.rs.ext.Provider;

/**
 * This interceptor verify the method name  and log the details
 * */
import org.jboss.resteasy.annotations.interception.ServerInterceptor;
import org.jboss.resteasy.core.ResourceMethod;
//import org.jboss.resteasy.core.ResourceMethodInvoker;
import org.jboss.resteasy.core.ServerResponse;
import org.jboss.resteasy.spi.Failure;
import org.jboss.resteasy.spi.HttpRequest;
import org.jboss.resteasy.spi.interception.PreProcessInterceptor;

@Provider
@ServerInterceptor
public class PreSecurityInterceptor implements PreProcessInterceptor {
    @Context HttpServletRequest req;

    @Override
    public ServerResponse preProcess(HttpRequest request, ResourceMethod method)
            throws Failure, WebApplicationException {

        System.out.println("********************************************* pre process *****************************");

        System.out.println(new Date() + " Method : " + method.getMethod().getName() + " being called from  "
                + req.getRemoteHost()+":"+req.getLocalPort()+": Remote Port "+req.getRemotePort());

         if ( "defaultMethod".equalsIgnoreCase(method.getMethod().getName())) {
            return null; // normal flow continues
        } else {
            System.out.println(new Date() + " Method : " + method.getMethod().getName() + " Precondition failed ");
            return (ServerResponse) Response
                    .status(Response.Status.PRECONDITION_FAILED).entity("invalid method details provided !!").build();
        }  
    }
}

审计restfull webservices中的用户标识，服务

1 个答案: