Class ActingAuditInterceptor
java.lang.Object
io.leandev.appfuse.security.auth.ActingAuditInterceptor
- All Implemented Interfaces:
org.springframework.web.servlet.HandlerInterceptor
public class ActingAuditInterceptor
extends Object
implements org.springframework.web.servlet.HandlerInterceptor
Request-level 代行稽核 capability(ADR-013 稽核章節)。
每個在代行脈絡下(模擬或代理)完成的請求,讀框架 ActingContext 發一筆 ACTING_ACCESS
AuditEvent(principal=真實操作者),由框架 io.leandev.appfuse.audit.PersistentAuditEventRepository
送往應用選用的 audit sink。直接兌現「JWT 於每次存取皆自帶代行脈絡」——稽核落於
存取層、每個動作一筆,
同一 hook 涵蓋模擬與代理兩維,不需 per-feature 的啟用記錄 session 表。
本類只固定事件解算;要掛在哪些 URL 由消費端的 Web MVC reference policy 決定。
非代行的一般請求不產生事件(isImpersonating()==false && isDelegating()==false 即 return)。
-
Constructor Summary
ConstructorsConstructorDescriptionActingAuditInterceptor(org.springframework.context.ApplicationEventPublisher eventPublisher) -
Method Summary
Modifier and TypeMethodDescriptionvoidafterCompletion(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, Object handler, Exception ex) Methods inherited from class Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface org.springframework.web.servlet.HandlerInterceptor
postHandle, preHandle
-
Constructor Details
-
ActingAuditInterceptor
public ActingAuditInterceptor(org.springframework.context.ApplicationEventPublisher eventPublisher)
-
-
Method Details
-
afterCompletion
-