Filter order in spring-boot

by

Guys from Spring helped again. See https://github.com/spring-projects/spring-boot/issues/1640 and https://jira.spring.io/browse/SEC-2730

Spring Security doesn’t set an order on the Filter bean that it
creates. This means that, when Boot is creating a
FilterRegistrationBean for it, it gets the default order which is
LOWEST_PRECEDENCE.

If you want your own Filter to go after Spring Security’s you can
create your own registration for Spring Security’s filter and specify
the order.

So the answer to my question is:

@Bean
public FilterRegistrationBean securityFilterChain(@Qualifier(AbstractSecurityWebApplicationInitializer.DEFAULT_FILTER_NAME) Filter securityFilter) {
    FilterRegistrationBean registration = new FilterRegistrationBean(securityFilter);
    registration.setOrder(Integer.MAX_VALUE - 1);
    registration.setName(AbstractSecurityWebApplicationInitializer.DEFAULT_FILTER_NAME);
    return registration;
}

@Bean
public FilterRegistrationBean userInsertingMdcFilterRegistrationBean() {
    FilterRegistrationBean registrationBean = new FilterRegistrationBean();
    UserInsertingMdcFilter userFilter = new UserInsertingMdcFilter();
    registrationBean.setFilter(userFilter);
    registrationBean.setOrder(Integer.MAX_VALUE);
    return registrationBean;
}

More Related Contents:

  1. Spring Boot Configure and Use Two DataSources
  2. Filter invoke twice when register as Spring bean
  3. Add context path to Spring Boot application
  4. Spring Boot Adding Http Request Interceptors
  5. How to customise the Jackson JSON mapper implicitly used by Spring Boot?
  6. Spring Boot Multiple Datasource
  7. Spring Boot configure and use two data sources
  8. CORS allowed-origin restrictions aren’t causing the server to reject requests
  9. How to bind an object list with thymeleaf?
  10. How to set base url for rest in spring boot?
  11. No serializer found for class org.hibernate.proxy.pojo.bytebuddy.ByteBuddyInterceptor
  12. How to configure embedded Tomcat integrated with Spring to listen requests to IP address, besides localhost?
  13. How to enable HTTP response caching in Spring Boot
  14. Spring Boot and custom 404 error page
  15. Spring Boot with redirecting with single page angular2
  16. HttpSecurity, WebSecurity and AuthenticationManagerBuilder
  17. Multipart File upload Spring Boot
  18. Spring Boot Actuator without Spring Boot
  19. Configure ViewResolver with Spring Boot and annotations gives No mapping found for HTTP request with URI error
  20. What is username and password when starting Spring Boot with Tomcat?
  21. Difference between Interceptor and Filter in Spring MVC
  22. Spring Security HTTP Basic for RESTFul and FormLogin (Cookies) for web – Annotations
  23. How to re-create database before each test in Spring?
  24. Using @RequestParam for multipartfile is a right way?
  25. Programmatically restart Spring Boot application / Refresh Spring Context
  26. How I create an error handler (404, 500…) in Spring Boot/MVC
  27. Howto get rid of ?
  28. How to handle requests that includes forward slashes (/)?
  29. Manually call Spring Annotation Validation
  30. Encoded password does not look like BCrypt

Leave a Comment