Log Spring Security Filter Chain

gistfile1.txt

/** Do not use in prod */
package com.devtiro.secureweb.services;

import jakarta.servlet.Filter;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.context.event.ApplicationReadyEvent;
import org.springframework.context.event.EventListener;
import org.springframework.security.web.DefaultSecurityFilterChain;
import org.springframework.security.web.FilterChainProxy;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.stereotype.Component;

import java.util.List;

@Component
public class SecurityFilterChainLogger {

  private static final Logger logger = LoggerFactory.getLogger(SecurityFilterChainLogger.class);

  @Autowired
  private FilterChainProxy filterChainProxy;

  @EventListener
  public void logFilterChain(ApplicationReadyEvent event) {
    logger.info("=== SPRING SECURITY FILTER CHAINS ===");

    List<SecurityFilterChain> filterChains = filterChainProxy.getFilterChains();

    for (int i = 0; i < filterChains.size(); i++) {
      SecurityFilterChain chain = filterChains.get(i);
      logger.info("Filter Chain {} ({})", i + 1, chain.getClass().getSimpleName());

      // Check if we can get the request matcher
      if (chain instanceof DefaultSecurityFilterChain) {
        DefaultSecurityFilterChain defaultChain = (DefaultSecurityFilterChain) chain;
        logger.info("  Request Matcher: {}", defaultChain.getRequestMatcher());
      }

      List<Filter> filters = chain.getFilters();
      logger.info("  Filters ({}):", filters.size());

      for (int j = 0; j < filters.size(); j++) {
        Filter filter = filters.get(j);
        logger.info("    [{}] {}", j + 1, filter.getClass().getSimpleName());
      }
      logger.info("");
    }

    logger.info("Total filter chains: {}", filterChains.size());
  }
}