This is a continuation, but for the remoteUser field 
(see https://groups.google.com/forum/#!topic/dropwizard-user/OzwpS4mHOOI 
for other fields).

In dropwizard, the auth is at the Jersey layer, but the audit log is at the 
servlet layer, so servlet auth is disabled 

setAuthentication(Authentication.NOT_CHECKED);


See org.eclipse.jetty.server.Request#recycle()

For this reason, the jersey layer may know the actual user making the 
request, but the audit logs won't record this, since jetty thinks auth is 
disabled so returns null 
to ch.qos.logback.access.spi.AccessEvent#getRemoteUser; so it will be 
skipped from the log.

Is there any way to get the audit log to learn about the user?

Thanks for your help!

-- 
You received this message because you are subscribed to the Google Groups 
"dropwizard-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/dropwizard-user/4534829d-b3ca-4a99-925c-a9e2764d69e2%40googlegroups.com.

Reply via email to