In SpringDataRest, How can i add custom logic when http request received

Question

As we know, In SpringDataRest, the Repository files are only used (not controllers) and we can use build-in methods for It.

My repository code is:

public interface StudentRepository extends JpaRepository<Student, Integer> {
}

I don't want to add custom methods and add my request processing logic there. I want some configuration or events overriding where i can process the HttpRequest handler, parse the token and check some data in token and based on that token i'll decide to either process that request or discard it with some error.

Thanks.

Are you using spring security? If you want to do checks on a token it sounds like a spring security use-case. — Ryan Dawson
– Ryan Dawson, Commented Aug 20, 2018 at 11:11
Yes, token security is already implemented (Using ResourceServer etc). But i have to move security based on user roles further which i need to extract from the token i received. — M.Haris Qayyum
– M.Haris Qayyum, Commented Aug 21, 2018 at 7:59
I'm wondering if you could use the antMatchers based on role like 6 in baeldung.com/java-config-spring-security — Ryan Dawson
– Ryan Dawson, Commented Aug 21, 2018 at 8:13

Ryan Dawson · Accepted Answer · 2018-08-21 08:39:14Z

1

If you want to restrict access to specific endpoints or operations with spring data rest and you are using spring security then you can use the @PreAuthorize annotation with hasRole. To take an example from 'Securing Spring Data REST PreAuthorize', you could have a CrudRepository like:

@PreAuthorize("hasRole('ROLE_USER')")
public interface ParkrunCourseRepository extends CrudRepository<ParkrunCourse, Long> {
    @Override
    @PreAuthorize("hasRole('ROLE_ADMIN')")
    ParkrunCourse save(ParkrunCourse parkrunCourse);
}

Then only users with the admin role will be able to do posts to save these entities.

answered Aug 21, 2018 at 8:39

Ryan Dawson

12.6k5 gold badges41 silver badges64 bronze badges

Sign up to request clarification or add additional context in comments.

14 Comments

M.Haris Qayyum Over a year ago

No friend, i don't have requirement for such ROLE based checks, I found solution here: gist.github.com/m-x-k/03a87252d2458010e1d69f37e35af6f1

Ryan Dawson Over a year ago

Sorry, didn't realise you were looking for more custom logic than just role-checks. Glad you found a solution in the HandlerInterceptorAdapter

M.Haris Qayyum Over a year ago

Do you have any idea how i can override/change URL in interceptor (preHandle) override method?

Ryan Dawson Over a year ago

You mean like do a redirect? If so you could try response.sendRedirect baeldung.com/spring-mvc-custom-handler-interceptor

M.Haris Qayyum Over a year ago

hi friend, many thanks for your support, i have found exactly what i was looking for here: github.com/yeldarxman/QueryDslPredicateModifier

|

Collectives™ on Stack Overflow

In SpringDataRest, How can i add custom logic when http request received

1 Answer 1

14 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

14 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related