Skip to content

Commit 796a1b6

Browse files
committed
Added more logging to openid auth backend
1 parent 6a05511 commit 796a1b6

1 file changed

Lines changed: 16 additions & 0 deletions

File tree

src/main/java/eu/openanalytics/containerproxy/auth/impl/OpenIDAuthenticationBackend.java

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,9 +24,12 @@
2424
import java.util.HashSet;
2525
import java.util.List;
2626
import java.util.Set;
27+
import java.util.stream.Collectors;
2728

2829
import javax.inject.Inject;
2930

31+
import org.apache.logging.log4j.LogManager;
32+
import org.apache.logging.log4j.Logger;
3033
import org.springframework.core.env.Environment;
3134
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
3235
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@@ -57,6 +60,8 @@ public class OpenIDAuthenticationBackend implements IAuthenticationBackend {
5760
private static final String REG_ID = "shinyproxy";
5861
private static final String ENV_TOKEN_NAME = "SHINYPROXY_OIDC_ACCESS_TOKEN";
5962

63+
private Logger log = LogManager.getLogger(OpenIDAuthenticationBackend.class);
64+
6065
private OAuth2AuthorizedClientService authorizedClientService;
6166

6267
@Inject
@@ -154,6 +159,17 @@ protected GrantedAuthoritiesMapper createAuthoritiesMapper() {
154159
for (GrantedAuthority auth: authorities) {
155160
if (auth instanceof OidcUserAuthority) {
156161
OidcIdToken idToken = ((OidcUserAuthority) auth).getIdToken();
162+
163+
if (log.isDebugEnabled()) {
164+
String lineSep = System.getProperty("line.separator");
165+
String claims = idToken.getClaims().entrySet().stream()
166+
.map(e -> String.format("%s -> %s", e.getKey(), e.getValue()))
167+
.collect(Collectors.joining(lineSep));
168+
log.debug(String.format("Checking for roles in claim '%s'. Available claims in ID token:%s%s",
169+
rolesClaimName, lineSep, claims));
170+
171+
}
172+
157173
List<String> roles = idToken.getClaimAsStringList(rolesClaimName);
158174
if (roles == null) continue;
159175
for (String role: roles) {

0 commit comments

Comments
 (0)