MokuLakshithReddy commented on code in PR #149:
URL:
https://github.com/apache/fineract-consumer-facing/pull/149#discussion_r4076448554
##########
consumer/src/main/java/org/apache/fineract/consumer/infrastructure/configs/SecurityConfig.java:
##########
@@ -81,6 +84,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity
http,
.oauth2ResourceServer(oauth2 -> oauth2
.bearerTokenResolver(SecurityConfig::resolveAccessTokenCookie)
.jwt(jwt -> jwt.decoder(accessTokenJwtDecoder)))
+ .addFilterBefore(new CorrelationIdFilter(correlationIdHolder),
+ BearerTokenAuthenticationFilter.class)
Review Comment:
Resolved! CorrelationIdFilter has now been registered as a servlet-wide
FilterRegistrationBean with Ordered.HIGHEST_PRECEDENCE. This ensures all entry
points across the servlet container (including /api/v1/oauth2/** and
/api/v1/openbanking/**) are covered before Spring Security executes.
Additionally, correlation IDs are now captured and persisted in both server and
client audit event entities.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
