在spring boot中使用MDC或任何筛选器屏蔽日志消息中的密码，而不使用logback.xml文件

Question

预期输出:2019-11-26 18:27:15,951[http-nio-8080-exec-2]INFO com.test.controller.testcontroller-用户密码:***********

我可以使用logback.xml文件实现同样的功能。如下所示。但是在Spring Boot时，需要使用application.properties配置文件，而没有logback文件。

注意：不要使用log4j xml文件。我们应该使用slf4j或MDC或任何过滤器和应用程序。属性

<configuration>

    <property name="DEV_HOME" value="c:/logs" />

    <appender name="CONSOLE"
        class="ch.qos.logback.core.ConsoleAppender">
        <encoder
            class="ch.qos.logback.core.encoder.LayoutWrappingEncoder">
            <layout class="com.test.config.MaskingPatternLayout">
                <patternsProperty>(SSN)</patternsProperty>
                <pattern>%d [%thread] %-5level %logger{35} - %msg%n</pattern>
            </layout>
        </encoder>
    </appender>

    <logger name="com.test" level="debug" additivity="false">
        <appender-ref ref="CONSOLE" />
    </logger>

    <root level="error">
        <appender-ref ref="CONSOLE" />
    </root>

</configuration>

package com.test.config;

import java.util.Optional;
import java.util.regex.Matcher;
import java.util.regex.Pattern;

import org.springframework.stereotype.Component;

import ch.qos.logback.classic.PatternLayout;
import ch.qos.logback.classic.spi.ILoggingEvent;

@Component
public class MaskingPatternTest extends PatternLayout {

    private String patternsProperty;
    private Optional<Pattern> pattern;

    public String getPatternsProperty() {
        return patternsProperty;
    }

    public void setPatternsProperty(String patternsProperty) {
        this.patternsProperty = patternsProperty;
        if (this.patternsProperty != null) {
            this.pattern = Optional.of(Pattern.compile(patternsProperty, Pattern.MULTILINE));
        } else {
            this.pattern = Optional.empty();
        }
    }

    @Override
    public String doLayout(ILoggingEvent event) {
        final StringBuilder message = new StringBuilder(super.doLayout(event));

        if (pattern.isPresent()) {
            Matcher matcher = pattern.get().matcher(message);
            while (matcher.find()) {

                int group = 1;
                while (group <= matcher.groupCount()) {
                    if (matcher.group(group) != null) {
                        for (int i = matcher.start(group); i < matcher.end(group); i++) {
                            message.setCharAt(i, '*');
                        }
                    }
                    group++;
                }
            }
        }
        return message.toString();
    }

}

请帮帮我。

Answer 1

一旦想要使用高级日志功能（除了设置日志级别之外），就必须使用日志库特定的配置，例如Logback.xml用于日志返回，log4j.xml用于log4j，等等。

但是，Logback确实有一个可以调用的API。例如，您可以使用bean设置ConsoleAppender:

@Bean
public LoggerContext loggerContext() {
    return (LoggerContext) LoggerFactory.getILoggerFactory();
}

@Bean
public MaskPatternLayout maskPatternLayout(LoggerContext context) {
    MaskPatternLayout layout = new MaskPatternLayout();
    layout.setPatternsProperty("(SSN)");
    layout.setPattern("%d [%thread] %-5level %logger{35} - %msg%n");
    layout.setContext(context);
    layout.start();
    return layout;
}

@Bean
public LayoutWrappingEncoder<ILoggingEvent> maskEncoder(MaskPatternLayout layout) {
    LayoutWrappingEncoder<ILoggingEvent> encoder = new LayoutWrappingEncoder<>();
    encoder.setLayout(layout);
    return encoder;
}

@Bean
public ConsoleAppender<ILoggingEvent> maskConsoleAppender(LoggerContext context, LayoutWrappingEncoder<ILoggingEvent> maskEncoder) {
    ConsoleAppender<ILoggingEvent> appender = new ConsoleAppender<>();
    appender.setContext(context);
    appender.setEncoder(maskEncoder);
    appender.start();
    return appender;
}

现在您可以创建自己的LoggerFactory:

@Component
public class MaskLoggerFactory {
    private final Appender<ILoggingEvent> appender;

    public MaskLoggerFactory(Appender<ILoggingEvent> appender) {
        this.appender = appender;
    }

    public org.slf4j.Logger getLogger(String name) {
        Logger logger = (Logger) LoggerFactory.getLogger(name);
        logger.addAppender(appender);
        logger.setLevel(Level.ALL);
        logger.setAdditive(false);
        return logger;
    }

    public org.slf4j.Logger getLogger(Class<?> cls) {
        return getLogger(cls.getName());
    }
}