Class ActingAuditInterceptor

java.lang.Object
io.leandev.appfuse.security.auth.ActingAuditInterceptor
All Implemented Interfaces:
org.springframework.web.servlet.HandlerInterceptor

public class ActingAuditInterceptor extends Object implements org.springframework.web.servlet.HandlerInterceptor

Request-level 代行稽核 capability(ADR-013 稽核章節)。

每個在代行脈絡下(模擬或代理)完成的請求,讀框架 ActingContext 發一筆 ACTING_ACCESS AuditEvent(principal=真實操作者),由框架 io.leandev.appfuse.audit.PersistentAuditEventRepository 送往應用選用的 audit sink。直接兌現「JWT 於每次存取皆自帶代行脈絡」——稽核落於 存取層、每個動作一筆, 同一 hook 涵蓋模擬與代理兩維,不需 per-feature 的啟用記錄 session 表。

本類只固定事件解算;要掛在哪些 URL 由消費端的 Web MVC reference policy 決定。 非代行的一般請求不產生事件(isImpersonating()==false && isDelegating()==false 即 return)。

  • Constructor Summary

    Constructors
    Constructor
    Description
    ActingAuditInterceptor(org.springframework.context.ApplicationEventPublisher eventPublisher)
     
  • Method Summary

    Modifier and Type
    Method
    Description
    void
    afterCompletion(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, Object handler, Exception ex)
     

    Methods inherited from class Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    Methods inherited from interface org.springframework.web.servlet.HandlerInterceptor

    postHandle, preHandle
  • Constructor Details

    • ActingAuditInterceptor

      public ActingAuditInterceptor(org.springframework.context.ApplicationEventPublisher eventPublisher)
  • Method Details

    • afterCompletion

      public void afterCompletion(@NonNull jakarta.servlet.http.HttpServletRequest request, @NonNull jakarta.servlet.http.HttpServletResponse response, @NonNull Object handler, @Nullable Exception ex)
      Specified by:
      afterCompletion in interface org.springframework.web.servlet.HandlerInterceptor