How to include JSON response body in Spring Boot Actuator's Trace?

Question

Spring Boot Actuator's Trace does a good job of capturing input/output HTTP params, headers, users, etc. I'd like to expand it to also capture the body of the HTTP response, that way I can have a full view of what is coming in and going out of the the web layer. Looking at the TraceProperties, doesn't look like there is a way to configure response body capturing. Is there a "safe" way to capture the response body without messing up whatever character stream it is sending back?

score 8 · Accepted Answer · answered Sep 02 '17 at 00:18

Recently, I wrote a blog post about customization of Spring Boot Actuator's trace endpoint and while playing with Actuator, I was kinda surprised that response body isn't one of the supported properties to trace.

I thought I may need this feature and came up with a quick solution thanks to Logback's TeeFilter.

To duplicate output stream of the response, I copied and used TeeHttpServletResponse and TeeServletOutputStream without too much examination.

Then, just like I explained in the blog post, extended WebRequestTraceFilter like:

@Component
public class RequestTraceFilter extends WebRequestTraceFilter {

    RequestTraceFilter(TraceRepository repository, TraceProperties properties) {
        super(repository, properties);
    }

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
        TeeHttpServletResponse teeResponse = new TeeHttpServletResponse(response);

        filterChain.doFilter(request, teeResponse);

        teeResponse.finish();

        request.setAttribute("responseBody", teeResponse.getOutputBuffer());

        super.doFilterInternal(request, teeResponse, filterChain);
    }

    @Override
    protected Map<String, Object> getTrace(HttpServletRequest request) {
        Map<String, Object> trace = super.getTrace(request);

        byte[] outputBuffer = (byte[]) request.getAttribute("responseBody");

        if (outputBuffer != null) {
            trace.put("responseBody", new String(outputBuffer));
        }

        return trace;
    }
}

Now, you can see responseBody in the JSON trace endpoint serves.

I tried to use this answer. Copied the exact code from above and the two classes TeeHttpServletResponse and TeeServletOutputStream. Now / trace gives me 500 with "Cannot call sendError() after the response has been committed", and any other resources gives me 200 with the body "syntax error". In the spring logs I cannot see any errors — isADon, Feb 18 '18 at 16:45
`RequestTraceFilter.java`'s package should be same with `TeeHttpServletResponse `, because `teeResponse.finish()` and `teeResponse.getOutputBuffer()` are private methods. — Cnfn, Oct 21 '18 at 07:57
In spring boot 2 the class have been moved to [HttpTraceFilter](https://github.com/spring-projects/spring-boot/blob/v2.2.5.RELEASE/spring-boot-project/spring-boot-actuator/src/main/java/org/springframework/boot/actuate/web/trace/servlet/HttpTraceFilter.java) — ST-DDT, Mar 17 '20 at 20:07

score 0 · Answer 2 · answered Oct 08 '20 at 04:32

From one of the spring maintainers:

Tracing the request and response body has never been supported out of the box. Support for tracing parameters was dropped as, when the request is POSTed form data, it requires reading the entire request body.

https://github.com/spring-projects/spring-boot/issues/12953

score 0 · Answer 3 · answered Oct 26 '20 at 13:39

With a webflux reactive stack, it is possible to capture http request and response body using spring-cloud-gateway and inject them into actuator httptrace by defining a custom HttpTraceWebFilter.

See full associated code at https://gist.github.com/gberche-orange/06c26477a313df9d19d20a4e115f079f

This requires quite a bit of duplication, hopefully springboot team will help reduce this duplication, see related https://github.com/spring-projects/spring-boot/issues/23907

How to include JSON response body in Spring Boot Actuator's Trace?

3 Answers3

Linked