在SOAP服务日志跟踪中禁用打印凭证

Question

从SpringBoot应用程序使用SOAP服务，应用程序正在将详细信息记录在* .log文件中.SOAP请求在xml中具有请求的用户名和密码，如何禁用要禁用的凭证从打印日志文件中获取。应用程序正在使用logback-spring.xml进行日志记录config.I希望日志中的SOAP请求xml，但不需要用户名和密码。

SOAP请求用户名和密码在* .LOG

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"> 
    <soap:Header> 
     <wsse:Security soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" 
     xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"> 
     <wsse:UsernameToken wsu:Id="UsernameToken-sometokenvalue"> 
      <wsse:Username>Username</wsse:Username> 
      <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">Password</wsse:Password> 
     </wsse:UsernameToken> 
     </wsse:Security> 
    </soap:Header> 
    <soap:Body> 
     <ns2:GetRequest xmlns="http://serviceapi.userwebsite.com/common/v1/serviceHeader" xmlns:ns2="http://serviceapi.userwebsite.com/service/v1" > 
     <RequestHeader> 
      <ServiceVersion>0.0.0</ServiceVersion> 
      <UserID>userID</UserID> 
     </RequestHeader> 
     <ns2:UserInfo StartAt=""> 
      <ns2:ID>P/O</ns2:ID> 
     </ns2:UserInfo> 
     </ns2:GetRequest> 
    </soap:Body> 
</soap:Envelope> 

的logback-spring.xml

<?xml version="1.0" encoding="UTF-8"?> 
<configuration> 
    <include resource="org/springframework/boot/logging/logback/base.xml" /> 

    <springProperty name="logsPath" source="app.logs.path" /> 

    <springProfile name="test,dev"> 

     <appender name="dailyRollingFileAppender" 
      class="ch.qos.logback.core.rolling.RollingFileAppender"> 
      <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy"> 
       <FileNamePattern>${logsPath}UserApp%d{MMddyyyy}.log 
       </FileNamePattern> 
       <maxHistory>30</maxHistory> 
      </rollingPolicy> 

      <encoder> 
       <Pattern>%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{35}-%msg %n</Pattern> 
      </encoder> 
     </appender> 
     <root level="INFO"> 
      <appender-ref ref="dailyRollingFileAppender" /> 
     </root> 
    </springProfile> 

摇篮依赖关系：

apply plugin: "no.nils.wsdl2java" 

wsdl2javaExt { 
    cxfVersion = "3.1.7" 
} 
    dependencies { 
     compile("org.springframework.boot:spring-boot-starter-web") 
     compile("org.springframework.boot:spring-boot-starter-batch") 
     compile("org.springframework.boot:spring-boot-starter-mail") 
     compile group: 'org.apache.commons', name: 'commons-lang3', version: '3.5' 
     compile group: 'org.apache.cxf', name: 'cxf-spring-boot-starter-jaxws', version: '3.1.10' 
     compile group: 'org.apache.cxf', name: 'cxf-rt-ws-security', version: '3.1.10' 
     testCompile('org.springframework.boot:spring-boot-starter-test') 
    } 

Answer 1

您可以实现自定义SOAPHandler以访问SoapMessage并根据需要转换输出日志消息。

@Override 
public boolean handleMessage(SOAPMessageContext arg0) { 
    SOAPMessage message = arg0.getMessage(); 
    boolean isOutboundMessage = (Boolean) arg0.get(MessageContext.MESSAGE_OUTBOUND_PROPERTY); 
    if (isOutboundMessage) { 
     System.out.println("OUTBOUND MESSAGE"); 
    } else { 
     System.out.println("INBOUND MESSAGE"); 
    } 
    try { 
     Source source = message.getSOAPPart().getContent(); 

     Transformer transformer = TransformerFactory.newInstance().newTransformer(); 

     transformer.setOutputProperty(OutputKeys.INDENT, "yes"); 
     transformer.setOutputProperty("{http://xml.apache.org/xslt}indent-amount", "2"); 

     transformer.transform(source, new StreamResult(System.out)); 
    } catch (Exception e) { 
     e.printStackTrace(); 
    } 
    return true; 
} 

见here