diff --git a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/TraceProperties.java b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/TraceProperties.java index 13184a50a6..3233ead562 100644 --- a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/TraceProperties.java +++ b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/TraceProperties.java @@ -1,5 +1,5 @@ /* - * Copyright 2012-2015 the original author or authors. + * Copyright 2012-2016 the original author or authors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -28,6 +28,7 @@ import org.springframework.boot.context.properties.ConfigurationProperties; * * @author Wallace Wadge * @author Phillip Webb + * @author Venil Noronha * @since 1.3.0 */ @ConfigurationProperties(prefix = "management.trace") @@ -39,12 +40,14 @@ public class TraceProperties { Set defaultIncludes = new LinkedHashSet(); defaultIncludes.add(Include.REQUEST_HEADERS); defaultIncludes.add(Include.RESPONSE_HEADERS); + defaultIncludes.add(Include.COOKIES); defaultIncludes.add(Include.ERRORS); DEFAULT_INCLUDES = Collections.unmodifiableSet(defaultIncludes); } /** - * Items to be included in the trace. Defaults to request/response headers and errors. + * Items to be included in the trace. Defaults to request/response headers (including cookies) + * and errors. */ private Set include = new HashSet(DEFAULT_INCLUDES); @@ -71,6 +74,11 @@ public class TraceProperties { */ RESPONSE_HEADERS, + /** + * Include "Cookie" in request and "Set-Cookie" in response headers. + */ + COOKIES, + /** * Include errors (if any). */ diff --git a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/WebRequestTraceFilter.java b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/WebRequestTraceFilter.java index d1c86f0d36..f3de956623 100644 --- a/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/WebRequestTraceFilter.java +++ b/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/trace/WebRequestTraceFilter.java @@ -48,6 +48,7 @@ import org.springframework.web.filter.OncePerRequestFilter; * @author Dave Syer * @author Wallace Wadge * @author Andy Wilkinson + * @author Venil Noronha */ public class WebRequestTraceFilter extends OncePerRequestFilter implements Ordered { @@ -162,6 +163,9 @@ public class WebRequestTraceFilter extends OncePerRequestFilter implements Order } headers.put(name, value); } + if (!isIncluded(Include.COOKIES)) { + headers.remove("Cookie"); + } return headers; } @@ -179,6 +183,9 @@ public class WebRequestTraceFilter extends OncePerRequestFilter implements Order String value = response.getHeader(header); headers.put(header, value); } + if (!isIncluded(Include.COOKIES)) { + headers.remove("Set-Cookie"); + } headers.put("status", "" + response.getStatus()); return headers; } diff --git a/spring-boot-actuator/src/test/java/org/springframework/boot/actuate/trace/WebRequestTraceFilterTests.java b/spring-boot-actuator/src/test/java/org/springframework/boot/actuate/trace/WebRequestTraceFilterTests.java index db0a32b7ab..6722146555 100644 --- a/spring-boot-actuator/src/test/java/org/springframework/boot/actuate/trace/WebRequestTraceFilterTests.java +++ b/spring-boot-actuator/src/test/java/org/springframework/boot/actuate/trace/WebRequestTraceFilterTests.java @@ -28,7 +28,6 @@ import javax.servlet.FilterChain; import javax.servlet.ServletException; import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; -import javax.servlet.http.Cookie; import org.junit.Test; @@ -50,6 +49,8 @@ import static org.mockito.Mockito.verify; * @author Wallace Wadge * @author Phillip Webb * @author Andy Wilkinson + * @author Venil Noronha + * @author Stephane Nicoll */ public class WebRequestTraceFilterTests { @@ -79,6 +80,7 @@ public class WebRequestTraceFilterTests { this.properties.setInclude(EnumSet.allOf(Include.class)); MockHttpServletRequest request = new MockHttpServletRequest("GET", "/foo"); request.addHeader("Accept", "application/json"); + request.addHeader("Cookie", "testCookie=testValue;"); request.setContextPath("some.context.path"); request.setContent("Hello, World!".getBytes()); request.setRemoteAddr("some.remote.addr"); @@ -88,8 +90,6 @@ public class WebRequestTraceFilterTests { String url = tmp.toURI().toURL().toString(); request.setPathInfo(url); tmp.deleteOnExit(); - Cookie cookie = new Cookie("testCookie", "testValue"); - request.setCookies(cookie); request.setAuthType("authType"); Principal principal = new Principal() { @@ -102,6 +102,7 @@ public class WebRequestTraceFilterTests { request.setUserPrincipal(principal); MockHttpServletResponse response = new MockHttpServletResponse(); response.addHeader("Content-Type", "application/json"); + response.addHeader("Set-Cookie", "a=b"); this.filter.doFilterInternal(request, response, new FilterChain() { @Override @@ -120,7 +121,7 @@ public class WebRequestTraceFilterTests { Map map = (Map) trace.get("headers"); assertThat(map.get("response").toString()) - .isEqualTo("{Content-Type=application/json, status=200}"); + .isEqualTo("{Content-Type=application/json, Set-Cookie=a=b, status=200}"); assertThat(trace.get("method")).isEqualTo("GET"); assertThat(trace.get("path")).isEqualTo("/foo"); assertThat(((String[]) ((Map) trace.get("parameters")).get("param"))[0]) @@ -131,7 +132,8 @@ public class WebRequestTraceFilterTests { assertThat(trace.get("contextPath")).isEqualTo("some.context.path"); assertThat(trace.get("pathInfo")).isEqualTo(url); assertThat(trace.get("authType")).isEqualTo("authType"); - assertThat(map.get("request").toString()).isEqualTo("{Accept=application/json}"); + assertThat(map.get("request").toString()) + .isEqualTo("{Accept=application/json, Cookie=testCookie=testValue;}"); } @Test @@ -153,6 +155,35 @@ public class WebRequestTraceFilterTests { assertThat(headers.get("response") == null).isTrue(); } + @Test + @SuppressWarnings({ "unchecked" }) + public void filterDoesNotAddRequestCookiesWithCookiesExclude() + throws ServletException, IOException { + this.properties.setInclude(Collections.singleton(Include.REQUEST_HEADERS)); + MockHttpServletRequest request = spy(new MockHttpServletRequest("GET", "/foo")); + request.addHeader("Accept", "application/json"); + request.addHeader("Cookie", "testCookie=testValue;"); + Map map = (Map) this.filter.getTrace(request) + .get("headers"); + assertThat(map.get("request").toString()).isEqualTo("{Accept=application/json}"); + } + + @Test + @SuppressWarnings({ "unchecked" }) + public void filterDoesNotAddResponseCookiesWithCookiesExclude() + throws ServletException, IOException { + this.properties.setInclude(Collections.singleton(Include.RESPONSE_HEADERS)); + MockHttpServletRequest request = new MockHttpServletRequest("GET", "/foo"); + MockHttpServletResponse response = new MockHttpServletResponse(); + response.addHeader("Content-Type", "application/json"); + response.addHeader("Set-Cookie", "testCookie=testValue;"); + Map trace = this.filter.getTrace(request); + this.filter.enhanceTrace(trace, response); + Map map = (Map) trace.get("headers"); + assertThat(map.get("response").toString()) + .isEqualTo("{Content-Type=application/json, status=200}"); + } + @Test public void filterHasResponseStatus() { MockHttpServletRequest request = new MockHttpServletRequest("GET", "/foo"); diff --git a/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc b/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc index 5bfa9e4af8..e0d915265c 100644 --- a/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc +++ b/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc @@ -1072,7 +1072,7 @@ content into your application; rather pick only the properties that you need. management.shell.telnet.port=5000 # Telnet port. # TRACING ({sc-spring-boot-actuator}/trace/TraceProperties.{sc-ext}[TraceProperties]) - management.trace.include=request-headers,response-headers,errors # Items to be included in the trace. + management.trace.include=request-headers,response-headers,cookies,errors # Items to be included in the trace. # METRICS EXPORT ({sc-spring-boot-actuator}/metrics/export/MetricExportProperties.{sc-ext}[MetricExportProperties]) spring.metrics.export.aggregate.key-pattern= # Pattern that tells the aggregator what to do with the keys from the source repository.