Log all REST api calls (when running as OSGi)

[aledsage]

When we switched to OSGi (and thus jax-rs), we no longer logged the REST api calls being made to Brooklyn (see https://github.com/apache/brooklyn-server/blob/master/rest/rest-server/src/main/java/org/apache/brooklyn/rest/filter/LoggingFilter.java for the old way we logged these).

This PR adds a similar logging class for jax-rs.

[duncangrant]

LGTM

[andreaturli]

lgtm, merging now

[andreaturli]

merged at apache/brooklyn-server master

[aledsage]

The diff of file rest/rest-resources/src/main/java/49bd6c7 has been merged to master.

However, this branch (and thus PR) was slightly changed compared to what was merged. The diff compared to master of org/apache/brooklyn/rest/filter/LoggingResourceFilter.java is:

76c76
<     private static final Set<String> CENSORED_HEADERS = ImmutableSet.of("Authorization");
---
>     private static final Set<String> CENSORED_HEADERS = ImmutableSet.of("Authorization", "Cookie");
159c159
<         boolean includeHeaders = (responseContext.getStatus() / 100 == 5) || LOG.isDebugEnabled();
---
>         boolean includeHeaders = (responseContext.getStatus() / 100 == 5) || LOG.isTraceEnabled();

[geomacy]

Would it be worth adding a correlation value here and in the response, so the two can be easily related to each other? Maybe just the hashCode() of the servletRequest object?

[andreaturli]

@geomacy @aledsage would it be useful/possible to use this library http://www.baeldung.com/spring-cloud-sleuth-single-application or at least re-use some design ideas?

[geomacy]

Think that looks like it's pretty closely tied to Spring. I'm guessing it works in with Spring's request handling. Certainly some of the examples on that page use Spring wiring.

[m4rkmckenna]

@aledsage Sorry im late to the party ... CXF has this functionality built in off the top of my head

Logging[In,Out]Inteceptor just needs to be added to the cxf inteceptor chain