Added optional X-Request-Id to RemoteIpFilter

[isapir]

trafficstars

This patch adds an optional requestIdHeader configuration to RemoteIpFilter, that when used, sets the XForwardedRequest.requestId to the value passed with that header.

By default, requestIdHeader is set to an empty string and is effectively disabled, thus maintaining backwards compatibility. Setting a value in the filter config, e.g. to "X-Request-Id", allows proxy servers or the client application to specify a Request ID, e.g. X-Request-Id: abcd-1234 which is then returned via getReuqestId().

I wanted to do the same for RemoteIpValve but it looks like there we do not use the XForwardedRequest and other changes will be required.

Feedback welcome.

[michael-o]

Will happily review in the next couple of days.

[isapir]

I was hoping to reuse XForwardedRequest from RemoteIpFilter in RemoteIpValve, but while a Filter's doFilter() takes a jakarta.servlet.ServletRequest [1] as an argument, a Valve's invoke() takes a org.apache.catalina.connector.Request [2] which in turn implements HttpServletRequest and ServletRequest.

Ideally, Valve's invoke() would take an interface like HttpServletRequest rather than the concrete implementation of connector.Request. What does connector.Request add on top of HttpServletRequest? Is it possible to change the Valve interface so that invoke() takes the HttpServletRequest interface?

My objective is to be able to either set the requestId or override getRequestId() so another approach might be to not reuse XForwardedRequest and instead add a setter like setRequestId().

Another option might be to make XForwardedRequest extend connector.Request, but that would require a reference to the Connector and coyote.Request which I don't think is available as the original call of the filterChain is from StandardWrapperValve:

filterChain.doFilter(request.getRequest(), response.getResponse());

So while request is connector.Request, the filter chain receives an instance of RequestFacade...

Perhaps I shouldn't try to reuse XForwardedRequest after all? I will still need to expose setRequestId() though :thinking:

Any thoughts? cc @rmaucher @markt-asf

[1] https://jakarta.ee/specifications/servlet/6.0/apidocs/jakarta.servlet/jakarta/servlet/filter#doFilter(jakarta.servlet.ServletRequest,jakarta.servlet.ServletResponse,jakarta.servlet.FilterChain)

[2] https://tomcat.apache.org/tomcat-11.0-doc/api/org/apache/catalina/Valve.html#invoke(org.apache.catalina.connector.Request,org.apache.catalina.connector.Response)

[markt-asf]

From memory of previous discussions, implementing Request/Response wrapping in Valves is non-trivial. I'd expose a setter for requestId.