How to preprocess all requests in Spring Web application?

Question

I have a RESTful Spring application, which can process various request with various controllers and various @RequestMapping-s.

Now I wish each request contain additionally a user/password pair, user as user GET parameter ?user=username and password in password POST parameter.

Is it possible to "preprocess" all requests before they go to controllers and check credentials and possible return authentication error?

Is this a mechanism, which is caller "filters" or not?

it could be better if you choose Spring-securityas well Spring-MVC in your case. — Vishal Gajera, Dec 25 '15 at 10:48
@vishalgajera how to keep RESTful with Spring Security? http://stackoverflow.com/questions/34453693/how-to-authenticate-login-logout-in-restful-web-application-in-spring — Dims, Dec 25 '15 at 11:36

score 5 · Answer 1 · edited Aug 25 '17 at 07:22

5

There are couple of ways for intercepting the requests before they land into controllers.

Using Servlet Filters:

    @WebFilter(urlPatterns = "path-to-intercept", filterName = "your-filter-name")
    public class MyRequestFilter implements Filter {
        init(...);
        doFilter(...);
        destroy(); 
    }

Using Spring HandlerIntecptors:

    public class MyRequestInterceptor extends HandlerInterceptorAdapter{

        preHandle(...); //called before the request lands to the controller.
        postHandle(...); //called after the controller method finishes execution.
        afterCompletion(...); //called before the response is sent.
    }

And in your configuration:

    <mvc:interceptors>
        <mvc:interceptor>
            <mvc:mapping path="/yourInterceptingPath/" />
            <bean class="path-to-your-Interceptor.MyRequestInterceptor" />
        </mvc:interceptor>
    </mvc:interceptors>

edited Aug 25 '17 at 07:22

walen

7,103
2
37
58

answered Dec 26 '15 at 02:49

Rana_S

1,520
2
23
39

In your servlet configuration file. – Rana_S Dec 26 '15 at 15:22
I don't have one and don't wish to create one :) – Dims Dec 26 '15 at 15:28
How is your request being handled then? – Rana_S Dec 26 '15 at 15:29
servlet 3.0 allows no `web.xml` – Dims Dec 26 '15 at 15:37
True. But in order to process the requests in Spring MVC, you have to register the Dispatcher Servlet. In this case, you can use option 1. – Rana_S Dec 26 '15 at 15:43

How to preprocess all requests in Spring Web application?

1 Answers1

Linked