Before made an internal system, recently a little time to perfect, the system use gateway + spring oauth2 do security, its micro service did not spring security (i.e. all the requests are blocked by gate and certification center certification, a direct access to the following what the user service, goods and services, and so on, these services do not do the certification to protect), now I want to be a log system, need to achieve the request of user information, IP, as well as the target interface and input parameters, in the absence of spring security, how do I operation to achieve the user's information? The gateway can add attributes to these requests? Such as the original request with only token, through the certification center parsing for user information and sent to the corresponding service, can put information in the header?