Quilt4Net.Toolkit.Api 0.6.1

Quilt4Net.Toolkit.Api

HTTP request/response logging and correlation tracking middleware for .NET Web Applications.

Captures method, path, headers, query parameters, request/response bodies, client IP, and execution time. Logs to Application Insights and/or standard ILogger.

Get started

Install the NuGet package Quilt4Net.Toolkit.Api and register the service in Program.cs.

var builder = WebApplication.CreateBuilder(args);

builder.AddQuilt4NetApiLogging();

var app = builder.Build();

app.UseQuilt4NetApiLogging();

app.Run();

By default, all requests to paths starting with /Api are logged.

Correlation ID

When UseCorrelationId is enabled (default), the middleware reads the X-Correlation-ID header from incoming requests. If no header is present, a new GUID is generated. The correlation ID is stored in HttpContext.Items and returned in the response header, enabling distributed tracing across services.

Logging mode

Control where logs are sent using HttpRequestLogMode.

builder.AddQuilt4NetApiLogging(o =>
{
    o.LogHttpRequest = HttpRequestLogMode.ApplicationInsights | HttpRequestLogMode.Logger;
});

Values can be combined with | to log to multiple destinations.

Path filtering

By default, only paths matching ^/Api (case-insensitive) are logged. Override with regex patterns.

builder.AddQuilt4NetApiLogging(o =>
{
    o.IncludePaths = [".*"]; // Log all paths
});

Per-endpoint control

Use [Logging] and [LoggingStream] attributes to override logging behavior on individual endpoints.

[Logging(RequestBody = true, ResponseBody = false)]
public async Task<IActionResult> StreamData() { ... }

[Logging(Enabled = false)]
public IActionResult InternalEndpoint() { ... }

[LoggingStream] // Shorthand for ResponseBody = false
public async Task<IActionResult> StreamEvents() { ... }

The [Logging] attribute can be applied to methods or classes.

Interceptor

Use an interceptor to modify or filter logged data before it is written. This is useful for removing sensitive information such as passwords or API keys.

builder.AddQuilt4NetApiLogging(o =>
{
    o.Interceptor = async (request, response, properties, serviceProvider) =>
    {
        // Remove sensitive headers
        request.Headers.Remove("Authorization");
        return (request, response, properties);
    };
});

Configuration

All options can be set via code or appsettings.json. Code takes priority over appsettings.json, which takes priority over defaults.

Code configuration

builder.AddQuilt4NetApiLogging(o =>
{
    o.LogHttpRequest = HttpRequestLogMode.ApplicationInsights;
    o.UseCorrelationId = true;
    o.MaxBodySize = 5_000_000;
    o.IncludePaths = ["^/Api", "^/webhook"];
    o.LogRequestBodyByDefault = true;
    o.LogResponseBodyByDefault = false;
});

appsettings.json

{
  "Quilt4Net": {
    "ApiLogging": {
      "LogHttpRequest": 1,
      "UseCorrelationId": true,
      "MonitorName": "Quilt4Net",
      "MaxBodySize": 1000000,
      "IncludePaths": ["^/Api"],
      "LogRequestBodyByDefault": true,
      "LogResponseBodyByDefault": false
    }
  }
}

Configuration path: Quilt4Net:ApiLogging

LoggingOptions

Logged data

Request

Response