Project

General

Custom queries

Profile

Actions

Feature #38262

closed

Tweak the OIDC issuer message

Added by Lukáš Hellebrandt about 2 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Low
Category:
Logging
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

Show more info about OIDC issuer rejection so the user can compare what was received with what was expected. Make it an info level message because something didn't go as expected.
Example output:
```
2025-03-04T08:34:06 [I|app|7157e122] Filter chain halted as :require_login rendered or redirected
2025-03-04T08:34:06 [I|app|7157e122] Completed 302 Found in 3ms (ActiveRecord: 0.2ms | Allocations: 1366)
2025-03-04T08:34:07 [I|app|9fe06d70] Started GET "/users/extlogin" for 10.45.225.5 at 2025-03-04 08:34:07 -0500
2025-03-04T08:34:07 [I|app|9fe06d70] Processing by UsersController#extlogin as HTML
2025-03-04T08:34:07 [E|app|9fe06d70] Invalid OIDC issuer received in JWT.
2025-03-04T08:34:07 [I|app|9fe06d70] Received invalid OIDC issuer 'https://<RHBK_FQDN>:8443/realms/master' but expected 'https://<RHBK_FQDN>:8443/auth/realms/master'
2025-03-04T08:34:07 [I|app|9fe06d70] Redirected to https://&lt;SAT_FQDN&gt;/users/login
2025-03-04T08:34:07 [I|app|9fe06d70] Filter chain halted as :require_login rendered or redirected
```

Actions

Also available in: Atom PDF