Spring Security

This commit is contained in:
Marcin Grzejszczak
2021-06-01 16:21:06 +02:00
parent 6a094db84e
commit 082ccbd2f2
23 changed files with 831 additions and 67 deletions

View File

@@ -75,6 +75,7 @@
|spring.sleuth.sampler.refresh.enabled | `true` | Enable refresh scope for sampler.
|spring.sleuth.scheduled.enabled | `true` | Enable tracing for {@link org.springframework.scheduling.annotation.Scheduled}.
|spring.sleuth.scheduled.skip-pattern | | Pattern for the fully qualified name of a class that should be skipped.
|spring.sleuth.security.enabled | `true` | Enable Spring Security instrumentation.
|spring.sleuth.span-filter.additional-span-name-patterns-to-ignore | | Additional list of span names to ignore. Will be appended to {@link #spanNamePatternsToSkip}.
|spring.sleuth.span-filter.enabled | `false` | Will turn on the default Sleuth handler mechanism. Might ignore exporting of certain spans;
|spring.sleuth.span-filter.span-name-patterns-to-skip | `^catalogWatchTaskScheduler$` | List of span names to ignore. They will not be sent to external systems.

View File

@@ -558,5 +558,11 @@ Fully qualified name of the enclosing class `org.springframework.cloud.sleuth.in
|http.status_code|Response status code.
|mvc.controller.class|Name of the class that is processing the request.
|mvc.controller.method|Name of the method that is processing the request.
|security.authentication.authenticated|Whether user is authenticated.
|security.authentication.authorities|Authorities assigned to the user.
|security.principal.account-non-expired|Whether principal's account is non expired.
|security.principal.authorities|Principal's authorities.
|security.principal.credentials-non-expired|Whether principal's credentials are non expired.
|security.principal.enabled|Whether principal is enabled.
|===

View File

@@ -651,6 +651,13 @@ This feature is available for all tracer implementations.
We're adding an instrumented Tomcat's `Valve` that originates the span.
In order to disable this instrumentation set `spring.sleuth.web.tomcat.enabled` to `false`.
[[sleuth-security-integration]]
== Spring Security
This feature is available for all tracer implementations.
We're injecting a custom filter into the Spring Security filter chains and we're tagging the existing span with security related tags.
In order to disable this instrumentation set `spring.sleuth.security.enabled` to `false`.
[[sleuth-jdbc-integration]]
== Spring JDBC