Question

从SpringBoot应用程序中消耗SOAP服务，应用程序在* .log文件中记录详细信息.SOAP请求具有xml中请求的用户名和密码，如何禁用要在日志文件中打印的凭据。应用程序使用logback-spring.xml来记录config.I希望日志中的SOAP请求xml但不想要用户名和密码。

使用* .log

中的用户名和密码的SOAP请求

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
   <soap:Header>
      <wsse:Security soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" 
      xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
         <wsse:UsernameToken wsu:Id="UsernameToken-sometokenvalue">
            <wsse:Username>Username</wsse:Username>
            <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">Password</wsse:Password>
         </wsse:UsernameToken>
      </wsse:Security>
   </soap:Header>
   <soap:Body>
      <ns2:GetRequest xmlns="http://serviceapi.userwebsite.com/common/v1/serviceHeader" xmlns:ns2="http://serviceapi.userwebsite.com/service/v1" >
         <RequestHeader>
            <ServiceVersion>0.0.0</ServiceVersion>
            <UserID>userID</UserID>
         </RequestHeader>
         <ns2:UserInfo StartAt="">
            <ns2:ID>P/O</ns2:ID>
         </ns2:UserInfo>
      </ns2:GetRequest>
   </soap:Body>
</soap:Envelope>

的logback-spring.xml

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <include resource="org/springframework/boot/logging/logback/base.xml" />

    <springProperty name="logsPath" source="app.logs.path" />

    <springProfile name="test,dev">

        <appender name="dailyRollingFileAppender"
            class="ch.qos.logback.core.rolling.RollingFileAppender">
            <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
                <FileNamePattern>${logsPath}UserApp%d{MMddyyyy}.log
                </FileNamePattern>
                <maxHistory>30</maxHistory>
            </rollingPolicy>

            <encoder>
                <Pattern>%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{35}-%msg %n</Pattern>
            </encoder>
        </appender>
        <root level="INFO">
            <appender-ref ref="dailyRollingFileAppender" />
        </root>
    </springProfile>

Gradle依赖项：

apply plugin: "no.nils.wsdl2java"

wsdl2javaExt {
    cxfVersion = "3.1.7"
}
    dependencies {
        compile("org.springframework.boot:spring-boot-starter-web")
        compile("org.springframework.boot:spring-boot-starter-batch")
        compile("org.springframework.boot:spring-boot-starter-mail")
        compile group: 'org.apache.commons', name: 'commons-lang3', version: '3.5'
        compile group: 'org.apache.cxf', name: 'cxf-spring-boot-starter-jaxws', version: '3.1.10'
        compile group: 'org.apache.cxf', name: 'cxf-rt-ws-security', version: '3.1.10'
        testCompile('org.springframework.boot:spring-boot-starter-test')
    }

Answer 1

您可以实现自定义SOAPHandler以访问SoapMessage并根据需要转换输出日志消息。

@Override
public boolean handleMessage(SOAPMessageContext arg0) {
    SOAPMessage message = arg0.getMessage();
    boolean isOutboundMessage = (Boolean) arg0.get(MessageContext.MESSAGE_OUTBOUND_PROPERTY);
    if (isOutboundMessage) {
        System.out.println("OUTBOUND MESSAGE");
    } else {
        System.out.println("INBOUND MESSAGE");
    }
    try {
        Source source = message.getSOAPPart().getContent();

        Transformer transformer = TransformerFactory.newInstance().newTransformer();

        transformer.setOutputProperty(OutputKeys.INDENT, "yes");
        transformer.setOutputProperty("{http://xml.apache.org/xslt}indent-amount", "2");

        transformer.transform(source, new StreamResult(System.out));
    } catch (Exception e) {
        e.printStackTrace();
    }
    return true;
}

请参阅here

禁用SOAP服务日志跟踪中的打印凭据

1 个答案: