Spring Cloud Stream Kafka Binder：如何禁止LoggingHandler记录敏感Payload

方法1：自定义LoggingHandler替换默认实现 #

继承Spring Integration的LoggingHandler，重写日志消息处理逻辑，对Payload进行脱敏或屏蔽：

import org.springframework.integration.handler.LoggingHandler;
import org.springframework.messaging.Message;
import org.springframework.messaging.support.MessageBuilder;
import java.util.logging.Level;

public class SanitizedLoggingHandler extends LoggingHandler {

    public SanitizedLoggingHandler(Level level) {
        super(level);
    }

    @Override
    protected void logMessage(Message<?> message) {
        // 构建脱敏后的消息，替换敏感Payload为固定标识
        Message<?> sanitizedMsg = MessageBuilder.fromMessage(message)
                .setPayload("[REDACTED SENSITIVE PAYLOAD]")
                .build();
        super.logMessage(sanitizedMsg);
    }
}

通过配置类注册自定义Handler，替换默认的errorChannel订阅者：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.integration.channel.DirectChannel;
import org.springframework.integration.dsl.IntegrationFlow;
import org.springframework.integration.dsl.IntegrationFlows;
import org.springframework.messaging.MessageChannel;
import java.util.logging.Level;

@Configuration
public class ErrorLoggingConfig {

    @Bean
    public MessageChannel errorChannel() {
        return new DirectChannel();
    }

    @Bean
    public IntegrationFlow errorLoggingFlow() {
        return IntegrationFlows.from(errorChannel())
                .handle(new SanitizedLoggingHandler(Level.SEVERE))
                .get();
    }
}

方法2：通过配置修改LoggingHandler的日志表达式 #

直接在配置文件中指定LoggingHandler的日志格式化表达式，排除Payload内容：

spring:
  integration:
    logging:
      handler:
        # 仅记录消息头及错误元数据，屏蔽Payload
        expression: "Message ID: #{headers.id}, Content Type: #{headers.contentType}, Error Detail: #{payload?.message ?: 'Unknown error'}"

该配置会让LoggingHandler只输出消息ID、内容类型和错误信息，不会打印原始敏感Payload。

方法3：自定义错误处理流程 #

绕过默认的LoggingHandler，实现完全自主控制的错误处理逻辑：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.integration.dsl.IntegrationFlow;
import org.springframework.integration.dsl.IntegrationFlows;
import org.springframework.messaging.MessageChannel;

@Configuration
public class CustomErrorHandlerConfig {

    @Bean
    public MessageChannel errorChannel() {
        return new DirectChannel();
    }

    @Bean
    public IntegrationFlow customErrorFlow() {
        return IntegrationFlows.from(errorChannel())
                .handle(message -> {
                    // 仅记录必要的错误元数据，不涉及敏感Payload
                    String errorLog = String.format("Message processing failed. ID: %s, Error: %s",
                            message.getHeaders().getId(),
                            message.getPayload().toString());
                    org.slf4j.LoggerFactory.getLogger(CustomErrorHandlerConfig.class)
                            .error(errorLog);
                })
                .get();
    }
}

内容的提问来源于stack exchange，提问作者HarishK