我遇到了类似的问题，我需要在输入请求中屏蔽密码。我对现有的 LogginInterceptor 和覆盖的格式方法做了一个小改动，并添加了我的方法来屏蔽密码。这是一个例子
public class CustomLogInInterceptor extends LoggingInInterceptor {
@Override
protected String formatLoggingMessage(LoggingMessage loggingMessage) {
String str = loggingMessage.toString();
String output = maskPasswords(str);
return(output);
}
private String maskPasswords(String str) {
final String[] keys = { "password", "passwords" };
for (String key : keys) {
int beginIndex = 0;
int lastIndex = -1;
boolean emptyPass = false;
while (beginIndex != -1
&& (beginIndex = StringUtils.indexOfIgnoreCase(str, key,
beginIndex)) > 0) {
beginIndex = StringUtils.indexOf(str, ">", beginIndex);
if (beginIndex != -1) {
char ch = str.charAt(beginIndex - 1);
if (ch == '/') {
emptyPass = true;
}
if (!emptyPass) {
lastIndex = StringUtils.indexOf(str, "<", beginIndex);
if (lastIndex != -1) {
String overlay = "*";
String str2 = StringUtils.substring(str,
beginIndex + 1, lastIndex);
if (str2 != null && str2.length() > 1) {
overlay = StringUtils.rightPad(overlay,
str2.length(), "*");
str = StringUtils.overlay(str, overlay,
beginIndex + 1, lastIndex);
}
}
}
if (emptyPass) {
emptyPass = false;
lastIndex = beginIndex + 1;
} else {
if (lastIndex != -1) {
lastIndex = StringUtils
.indexOf(str, ">", lastIndex);
}
}
}
beginIndex = lastIndex;
}
}
return str;
}
}
并在我的 cxf-bean.xml 中添加了自定义 cxf 日志记录 bean
<bean id="kpInInterceptor" class="com.kp.util.CustomLogInInterceptor" />
<cxf:bus>
<cxf:inInterceptors>
<ref bean="kpInInterceptor" />
</cxf:inInterceptors>
<cxf:inFaultInterceptors>
<ref bean="kpInInterceptor" />
</cxf:inFaultInterceptors>
</cxf:bus>
注意我使用 Apache commons-lang3 jar 进行字符串操作。同样，您也可以用于响应
更新
使用模式并使用属性使键可配置。
拦截器
public class CustomLogInInterceptor extends LoggingInInterceptor {
private static final String MASK_PATTERN = "<\\s*{}\\s*>(.*)</\\s*{}\\s*>|<\\s*name\\s*>\\s*{}\\s*</\\s*name\\s*>\\s*<\\s*value\\s*>(.*)<";
private Pattern pattern;
private String[] keys;
public void init() {
StringBuilder builder = new StringBuilder();
for (String str : keys) {
builder.append(MASK_PATTERN.replace("{}", str));
builder.append("|");
}
builder.setLength(builder.length()-1);
pattern = Pattern.compile(builder.toString(), Pattern.CASE_INSENSITIVE | Pattern.MULTILINE);
}
public void setKeys(String[] keys) {
this.keys = keys;
}
@Override
protected String formatLoggingMessage(LoggingMessage loggingMessage) {
String output = maskPasswords(loggingMessage.toString());
return(output);
}
private String maskPasswords(String str) {
Matcher matcher = pattern.matcher(str);
final StringBuilder builder = new StringBuilder(str);
while (matcher.find()) {
int group = 1;
while (group <= matcher.groupCount()) {
if (matcher.group(group) != null) {
for (int i = matcher.start(group); i < matcher.end(group); i++) {
builder.setCharAt(i, '*');
}
}
group++;
}
}
return builder.toString();
}
}
创建 Bean
<bean id="kpInInterceptor" class="com.kp.util.CustomLogInInterceptor" init-method="init">
<property name="keys">
<array value-type="java.lang.String">
<value>password</value>
<value>accountId</value>
</array>
</property>
</bean>
示例输入
<?xml version="1.0" encoding="UTF-8"?>
<test>
<hello>adffas</hello>
<vsdsd>dfsdf</vsdsd>
<password>sdfsfs</password>
<sdfsfsf>sdfsfsf</sdfsfsf>
<password>3434</password>
<name>password</name>
<value>sdfsfs</value>
<password />
<name>password</name>
<value />
<accountId>123456</accountId>
<hello>
<inner1>
<password>
<password>sdfsfs</password>
</password>
</inner>
</hello>
</test>
还有输出
<?xml version="1.0" encoding="UTF-8"?>
<test>
<hello>adffas</hello>
<vsdsd>dfsdf</vsdsd>
<password>******</password>
<sdfsfsf>sdfsfsf</sdfsfsf>
<password>****</password>
<name>password</name>
<value>******</value>
<password />
<name>password</name>
<value />
<accountId>******</accountId>
<hello>
<inner1>
<password>
<password>******</password>
</password>
</inner>
</hello>
</test>