如何通过Spring Data Elasticsearch传递认证Cookie至ES集群？

针对你遇到的Cookie透传问题，结合ES 7.8.0和Spring Data Elasticsearch 3.2.12的版本特性，推荐以下两种实用方案：

1. ThreadLocal+RestClient拦截器：无侵入式Cookie透传 #

这是最通用的方案，不需要修改现有Spring Data Repository代码，通过动态拦截ES请求实现Cookie注入：

步骤1：用ThreadLocal存储请求上下文的Cookie #

定义一个工具类，用ThreadLocal暂存当前请求的Cookie，确保每个线程的Cookie相互隔离：

public class EsCookieContext {
    private static final ThreadLocal<String> COOKIE_STORAGE = new ThreadLocal<>();

    public static void setCookie(String cookie) {
        COOKIE_STORAGE.set(cookie);
    }

    public static String getCookie() {
        return COOKIE_STORAGE.get();
    }

    public static void clear() {
        COOKIE_STORAGE.remove();
    }
}

步骤2：Spring请求拦截器提取并存储Cookie #

实现HandlerInterceptor，在请求进入时从HttpServletRequest中提取Cookie存入ThreadLocal，请求结束后清理避免内存泄漏：

@Component
public class RequestCookieInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
        String cookieHeader = request.getHeader("Cookie");
        if (cookieHeader != null && !cookieHeader.isEmpty()) {
            EsCookieContext.setCookie(cookieHeader);
        }
        return true;
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) {
        EsCookieContext.clear();
    }
}

记得在Spring配置类中注册这个拦截器，指定拦截的路径。

步骤3：给RestHighLevelClient添加请求拦截器 #

在创建单例RestHighLevelClient时，通过HttpClientConfigCallback添加自定义拦截器，每次ES请求发起前从ThreadLocal中取出Cookie并注入请求头：

@Configuration
public class EsConfig {
    @Bean
    public RestHighLevelClient restHighLevelClient() {
        RestClientBuilder builder = RestClient.builder(new HttpHost("your-es-host", 9200, "http"));

        builder.setHttpClientConfigCallback(httpClientBuilder -> {
            httpClientBuilder.addInterceptorLast((HttpRequestInterceptor) (request, context) -> {
                String cookie = EsCookieContext.get();
                if (cookie != null) {
                    request.addHeader("Cookie", cookie);
                }
            });
            return httpClientBuilder;
        });

        return new RestHighLevelClient(builder);
    }
}

这样所有通过该单例客户端发起的请求（包括Spring Data Repository自动生成的方法）都会自动带上当前请求的Cookie。

2. 自定义Repository实现：精细化控制请求 #

如果需要对某些请求做特殊处理，可以扩展Spring Data Repository，手动控制ES请求的Header：

步骤1：定义自定义Repository接口 #

public interface CustomSearchRepository {
    List<YourEntity> searchWithCustomCookie(String keyword, String cookie);
}

步骤2：实现自定义接口 #

直接注入RestHighLevelClient，在方法中手动添加Cookie请求头：

public class CustomSearchRepositoryImpl implements CustomSearchRepository {
    private final RestHighLevelClient client;
    private final ObjectMapper objectMapper;

    // 构造方法注入依赖
    public CustomSearchRepositoryImpl(RestHighLevelClient client, ObjectMapper objectMapper) {
        this.client = client;
        this.objectMapper = objectMapper;
    }

    @Override
    public List<YourEntity> searchWithCustomCookie(String keyword, String cookie) throws IOException {
        SearchRequest request = new SearchRequest("your-index");
        SearchSourceBuilder sourceBuilder = new SearchSourceBuilder();
        sourceBuilder.query(QueryBuilders.matchQuery("content", keyword));
        request.source(sourceBuilder);

        // 手动添加Cookie
        request.addHeader("Cookie", cookie);

        SearchResponse response = client.search(request, RequestOptions.DEFAULT);
        // 解析响应为实体列表
        List<YourEntity> result = new ArrayList<>();
        for (SearchHit hit : response.getHits().getHits()) {
            result.add(objectMapper.readValue(hit.getSourceAsString(), YourEntity.class));
        }
        return result;
    }
}

步骤3：让Spring Data Repository继承自定义接口 #

public interface YourEntityRepository extends ElasticsearchRepository<YourEntity, String>, CustomSearchRepository {
}

业务层调用时，从当前请求上下文取出Cookie传入即可。

注意事项 #

• ThreadLocal必须在请求结束后清理，否则线程池复用会导致Cookie串值；
• 确保透传的Cookie格式符合ES集群的认证要求，比如包含正确的会话令牌；
• 方案1是无侵入式的，适合大多数场景；方案2适合需要特殊请求逻辑的场景。

内容的提问来源于stack exchange，提问作者kembhootha