{"id":10025,"date":"2025-10-24T18:22:18","date_gmt":"2025-10-24T09:22:18","guid":{"rendered":"https:\/\/www.ois-yokohama.co.jp\/oisblog2018\/?p=10025"},"modified":"2025-11-16T07:28:30","modified_gmt":"2025-11-15T22:28:30","slug":"spring-security%e5%b0%8f%e3%83%8d%e3%82%bf","status":"publish","type":"post","link":"https:\/\/www.ois-yokohama.co.jp\/oisblog2018\/archives\/10025","title":{"rendered":"spring security\u5c0f\u30cd\u30bf"},"content":{"rendered":"
\"\u732b\u597d\u304d\u30ea\u30fc\u30de\u30f3\"<\/div>\n

\u3053\u3093\u306b\u3061\u308f\u3001\u732b\u597d\u304d\u30ea\u30fc\u30de\u30f3\u306e\u307b\u3052PG\u3067\u3059\u3002<\/p>\n\n\n\n

3\u3064\u307b\u3069\u5c0f\u30cd\u30bf\u7d39\u4ecb\u3067\u3059\u3002<\/p>\n\n\n\n

\uff11\uff0c  \u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u3092\u30ed\u30b0\u51fa\u529b\u3059\u308b<\/h3>\n\n\n\n

\u4ed5\u7d44\u307f\uff1a\u30bb\u30c3\u30b7\u30e7\u30f3\u306b\u8a8d\u8a3c\u60c5\u5831\u304c\u4fdd\u5b58\u3055\u308c\u3066\u3044\u308b\u306e\u3067\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u5165\u308a\u53e3\u3067\u8a8d\u8a3c\u60c5\u5831\u3092\u53d6\u5f97\u3057MDC.put()\u3059\u308b\u3060\u3051\u3002<\/p>\n\n\n\n

\u30d5\u30a3\u30eb\u30bf\u30fc<\/p>\n\n\n\n

@Component\n@Slf4j\npublic class HogeLoggingFilter extends CommonsRequestLoggingFilter {\n\n    @Override\n    protected boolean shouldLog(HttpServletRequest request) {\n        String uri = request.getServletPath();\n        return !checkStaticPath(uri);\n    }\n\n    private boolean checkStaticPath(String path) {\n        return path.startsWith(\"\/static\/\");\n    }\n\n    @Override\n    protected void beforeRequest(HttpServletRequest request, String message) {\n        LoginUser user = getLoginUser(request.getSession(false));\n        if (user != null) {\n            MDC.put(\"USER-ID\", user.getId());\n        }\n    }\n\n    public LoginUser getLoginUser(HttpSession session) {\n        if (session != null) {\n            SecurityContext securityContext = (SecurityContext) session.getAttribute(\"SPRING_SECURITY_CONTEXT\");\n            if (securityContext != null) {\n                Authentication authentication = securityContext.getAuthentication();\n                return (LoginUser) authentication.getPrincipal();\n            }\n        }\n        return null;\n    }\n\n    @Override\n    protected void afterRequest(HttpServletRequest request, String message) {\n        MDC.remove(\"USER-ID\");\n    }\n}<\/code><\/pre>\n\n\n\n
\u203b\u7d99\u627f\u5143\u304c\u7528\u9014\u306b\u5408\u3063\u3066\u3044\u306a\u3044\u306e\u3067javax.servlet.Filter \u3092\u4f7f\u3063\u305f\u65b9\u304c\u826f\u3044\u304b\u3082<\/p>\n\n\n\n
\u30ed\u30b0\u5b9a\u7fa9<\/p>\n\n\n\n
    <appender name=\"STDOUT\" class=\"ch.qos.logback.core.ConsoleAppender\">\n        <target>System.out<\/target>\n        <encoder>\n            <charset>UTF-8<\/charset>\n            <pattern>%date{yyyy-MM-dd HH:mm:ss} %-5level %5.5thread %X{USER-ID} \\(%file:%line\\) %M - %msg%n<\/pattern>\n        <\/encoder>\n    <\/appender><\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
<\/div>\n\n\n\n
\uff12\uff0c  \u66f4\u65b0\u7cfbSQL\u3060\u3051\u30ed\u30b0\u51fa\u529b\u3059\u308b<\/h3>\n\n\n\n
\u4ed5\u7d44\u307f\uff1amybatis\u9650\u5b9a\u306b\u306a\u308b\u304c\u3001Mapper\u306e\u30e1\u30bd\u30c3\u30c9\u540d\u3092\u66f4\u65b0\u7cfb\u306finsert\/update\/delete\u3067\u59cb\u307e\u308b\u30e1\u30bd\u30c3\u30c9\u540d\u306b\u3057\u3001\u30ed\u30b0\u30d5\u30a3\u30eb\u30bf\u30fc\u3067\u30ed\u30ac\u30fc\u540d\u304b\u3089\u66f4\u65b0\u7cfb\u304b\u5224\u65ad\u3059\u308b\u3002<\/p>\n\n\n\n
\u30ed\u30b0\u30d5\u30a3\u30eb\u30bf\u30fc<\/p>\n\n\n\n
public class SqlLogFilter extends Filter<ILoggingEvent> {\n    private static final List<String> DEFAULT_ACCEPT = List.of(\"insert\", \"update\", \"delete\");\n\n    private static boolean checkName(String name) {\n        for (String s : DEFAULT_ACCEPT) {\n            if (name.startsWith(s)) {\n                return true;\n            }\n        }\n        return false;\n    }\n\n    @Override\n    public FilterReply decide(ILoggingEvent event) {\n        String loggerName = event.getLoggerName();\n        if (loggerName.startsWith(\"jp.co.ois.hoge.springsecurity.mapper\")) {\n            int ix = loggerName.lastIndexOf(\".\");\n            String name = loggerName.substring(ix + 1);\n            if (!checkName(name)) {\n                return FilterReply.DENY;\n            }\n        }\n        return FilterReply.ACCEPT;\n    }\n}<\/code><\/pre>\n\n\n\n
\u30ed\u30b0\u5b9a\u7fa9<\/p>\n\n\n\n
    <appender name=\"STDOUT\" class=\"ch.qos.logback.core.ConsoleAppender\">\n        <target>System.out<\/target>\n        \u2026\n        <filter class=\"jp.co.ois.hoge.springsecurity.util.SqlLogFilter\" \/>\n    <\/appender><\/code><\/pre>\n\n\n\n
<\/div>\n\n\n\n
\uff13\uff0c  \u8d77\u52d5\u6642\u306bwar\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u30ed\u30b0\u51fa\u529b\u3059\u308b<\/h3>\n\n\n\n
\u4ed5\u7d44\u307f\uff1a\u8d77\u52d5\u7d42\u4e86\u30ea\u30b9\u30ca\u30fc\u3067ServletContextEvent\u304b\u3089MANIFEST.MF\u3092\u53c2\u7167\u3057\u3001\u30ed\u30b0\u51fa\u529b\u3059\u308b\u3002<\/p>\n\n\n\n
\u8d77\u52d5\u7d42\u4e86\u30ea\u30b9\u30ca\u30fc<\/p>\n\n\n\n
@WebListener\n@Slf4j\npublic class HogeContextListener implements ServletContextListener {\n\n    @Override\n    public void contextInitialized(ServletContextEvent sce) {\n        log.info(\"Starting.\");\n        ServletContext sc = sce.getServletContext();\n        String metafile = \"\/META-INF\/MANIFEST.MF\";\n        try (InputStream is = sc.getResourceAsStream(metafile)) {\n            byte[] bytes = is.readAllBytes();\n            String meta = new String(bytes, StandardCharsets.UTF_8);\n            meta.lines()\n                .filter(s -> s.startsWith(\"Implementation-Version\"))\n                .forEach(this::info);\n        } catch (IOException e) {\n            log.error(e.toString(), e);\n        }\n    }\n    \n    private void info(String s) {\n        log.info(s);\n    }\n    \n    @Override\n    public void contextDestroyed(ServletContextEvent sce) {\n        log.info(\"Shutdown.\");\n    }\n}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u4e00\u5f0f\u3092\u6dfb\u4ed8\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"
\u3053\u3093\u306b\u3061\u308f\u3001\u732b\u597d\u304d\u30ea\u30fc\u30de\u30f3\u306e\u307b\u3052PG\u3067\u3059\u3002 3\u3064\u307b\u3069\u5c0f\u30cd\u30bf\u7d39\u4ecb\u3067\u3059\u3002 \uff11\uff0c  \u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u3092\u30ed\u30b0\u51fa\u529b\u3059\u308b \u4ed5\u7d44\u307f\uff1a\u30bb\u30c3\u30b7\u30e7\u30f3\u306b\u8a8d\u8a3c\u60c5\u5831\u304c\u4fdd\u5b58\u3055\u308c\u3066\u3044\u308b\u306e\u3067\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u5165\u308a\u53e3\u3067\u8a8d\u8a3c\u60c5\u5831\u3092\u53d6\u5f97\u3057MDC.put( […]<\/p>\n","protected":false},"author":1,"featured_media":10033,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"sns_share_botton_hide":"","vkExUnit_sns_title":"","_vk_print_noindex":"","sitemap_hide":"","vkExUnit_EyeCatch_disable":"","_veu_custom_css":"","veu_display_promotion_alert":"common","vkexunit_cta_each_option":"","footnotes":""},"categories":[6],"tags":[28,1167,1166,1165,1171,1172,1178],"class_list":["post-10025","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-engineer","tag-hoge","tag-logback","tag-spring-security-5","tag-springboot-2-7","tag-1171","tag-sql","tag-war"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t