org.owasp.security.logging.mdc.plugins.SessionPlugin Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of security-logging-common Show documentation

The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.

There is a newer version: 1.1.7

Show newest version

package org.owasp.security.logging.mdc.plugins;

import javax.servlet.FilterConfig;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import org.owasp.security.logging.Utils;
import org.owasp.security.logging.mdc.IPlugin;
import org.slf4j.MDC;

/**
 * This plugin adds a hash of the session ID to the MDC. The value can 
 * be accessed in a PatternLayout by using the specifier: %X{session}
 *
 * @author August Detlefsen [[email protected]]
 */
public class SessionPlugin implements IPlugin {

    public void init(FilterConfig config) {
    }
    
    public void execute(HttpServletRequest request) {
        HttpSession session = request.getSession();
        if (session != null) {
            //capture (a hash of) the session ID
            String hashedSession = Utils.toSHA(session.getId());
            MDC.put("session", hashedSession);
        }
    }

}