javaservletsparametershttprequestservlet-filters

Http Servlet request lose params from POST body after read it once


I'm trying to access two http request parameters in a Java Servlet filter, nothing new here, but was surprised to find that the parameters have already been consumed! Because of this, they are not available in the filter chain anymore.

It seems that this only occurs when parameters come in a POST request body (a form submit, for example).

Is there a way to read the parameters and NOT consume them?

So far I've found only this reference: Servlet Filter using request.getParameter loses Form data.

Thanks!


Solution

  • As an aside, an alternative way to solve this problem is to not use the filter chain and instead build your own interceptor component, perhaps using aspects, which can operate on the parsed request body. It will also likely be more efficient as you are only converting the request InputStream into your own model object once.

    However, I still think it's reasonable to want to read the request body more than once particularly as the request moves through the filter chain. I would typically use filter chains for certain operations that I want to keep at the HTTP layer, decoupled from the service components.

    As suggested by Will Hartung I achieved this by extending HttpServletRequestWrapper, consuming the request InputStream and essentially caching the bytes.

    public class MultiReadHttpServletRequest extends HttpServletRequestWrapper {
      private ByteArrayOutputStream cachedBytes;
    
      public MultiReadHttpServletRequest(HttpServletRequest request) {
        super(request);
      }
    
      @Override
      public ServletInputStream getInputStream() throws IOException {
        if (cachedBytes == null)
          cacheInputStream();
    
          return new CachedServletInputStream(cachedBytes.toByteArray());
      }
        
      @Override
      public BufferedReader getReader() throws IOException{
        return new BufferedReader(new InputStreamReader(getInputStream()));
      }
    
      private void cacheInputStream() throws IOException {
        /* Cache the inputstream in order to read it multiple times. For
         * convenience, I use apache.commons IOUtils
         */
        cachedBytes = new ByteArrayOutputStream();
        IOUtils.copy(super.getInputStream(), cachedBytes);
      }
    
     
      /* An input stream which reads the cached request body */
      private static class CachedServletInputStream extends     ServletInputStream {
    
        private final ByteArrayInputStream buffer;
    
        public CachedServletInputStream(byte[] contents) {
          this.buffer = new ByteArrayInputStream(contents);
        }
    
        @Override
        public int read() {
          return buffer.read();
        }
    
        @Override
        public boolean isFinished() {
          return buffer.available() == 0;
        }
    
        @Override
        public boolean isReady() {
          return true;
        }
    
        @Override
        public void setReadListener(ReadListener listener) {
      throw new RuntimeException("Not implemented");
        }
      }
    }
    

    Now the request body can be read more than once by wrapping the original request before passing it through the filter chain:

    public class MyFilter implements Filter {
      @Override
      public void doFilter(ServletRequest request, ServletResponse response,
            FilterChain chain) throws IOException, ServletException {
    
        /* wrap the request in order to read the inputstream multiple times */
        MultiReadHttpServletRequest multiReadRequest = new MultiReadHttpServletRequest((HttpServletRequest) request);
    
        /* here I read the inputstream and do my thing with it; when I pass the
         * wrapped request through the filter chain, the rest of the filters, and
         * request handlers may read the cached inputstream
         */
        doMyThing(multiReadRequest.getInputStream());
        //OR
        anotherUsage(multiReadRequest.getReader());
        chain.doFilter(multiReadRequest, response);
      }
    }
    

    This solution will also allow you to read the request body multiple times via the getParameterXXX methods because the underlying call is getInputStream(), which will of course read the cached request InputStream.

    Edit

    For newer version of ServletInputStream interface. You need to provide implementation of few more methods like isReady, setReadListener etc. Refer this question as provided in comment below.