Brian Clozel

Sorry for the late feedback. The Servlet Filter abstraction works well in general for Spring MVC, although some people find that limited and prefer a custom Tomcat Valve for observations...

@davidmelia I'm not really sure I understand the use case here. If you are trying to have additional metrics/traces tags contributed to the observation, you don't need to set things...

@edigu your use case might be a bit different actually. 1. Is the application reactive or Servlet based? 2. Which Spring Boot version are you using? 3. If the request...

I think spring-projects/spring-framework#28058 makes it clear that a complete URL is expected when using the URI method variants. This was really the core of the problem you've reported. Now when...

This looks like a duplicate of #29599. What would like the outcome of this issue to be?

`CancelledServerWebExchangeException` doesn't happen with Tomcat, because [Servlet containers are not notified when a client closes the connection](https://github.com/jakartaee/servlet/issues/44). With Servlet containers, you're only getting an error if the server is failing...

I'd like to focus on the issue being discussed here: in the case of connections closed prematurely by clients, how is the current behavior incorrect? What would be the expected...

With your latest tests, is it still the case that this behavior cannot be reproduced without Spring Security?

@MBalciunas Thanks - I'm reaching out to the Security team internally. To me it's somehow expected to have additional latency there as credentials checks are expected to take time/CPU resources....

After reaching out to the security and testing things further, here's an update. A colleague from the security team couldn't reproduce the issue on their (more powerful?) machine. I don't...