[java-oidc-common] branch main updated: Lower logging level.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=5f0d3cfe31e867c59733622ed23c105932574a25

The following commit(s) were added to refs/heads/main by this push:
     new 5f0d3cf  Lower logging level.
5f0d3cf is described below

commit 5f0d3cfe31e867c59733622ed23c105932574a25
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Dec 30 14:50:24 2021 -0500

    Lower logging level.
---
 .../oidc/security/impl/JWTSignatureValidationUtil.java         | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/JWTSignatureValidationUtil.java b/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/JWTSignatureValidationUtil.java
index 9b5efdf..ea5ff4b 100644
--- a/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/JWTSignatureValidationUtil.java
+++ b/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/JWTSignatureValidationUtil.java
@@ -73,18 +73,18 @@ public final class JWTSignatureValidationUtil {
             @Nonnull final SignedJWT signedJwt, @Nullable final String invalidJwtEventId) {
         
         if (secParamCtx == null) {
-            log.error("No security parameters context is available");
+            log.warn("No security parameters context is available");
             return EventIds.INVALID_SEC_CFG;
         }
         if (secParamCtx.getSignatureSigningParameters() == null
                 || !(secParamCtx.getSignatureSigningParameters() instanceof OIDCSignatureValidationParameters)) {
-            log.error("No signature validation credentials available");
+            log.warn("No signature validation credentials available");
             return EventIds.INVALID_SEC_CFG;
         }
         final OIDCSignatureValidationParameters signatureValidationParameters =
                 (OIDCSignatureValidationParameters) secParamCtx.getSignatureSigningParameters();
         if (signatureValidationParameters.getValidationCredentials().isEmpty()) {
-            log.error("Unable to find any keys to validate given JWT signature");
+            log.warn("Unable to find any keys to validate given JWT signature");
             return EventIds.INVALID_SEC_CFG;            
         }        
         
@@ -116,7 +116,7 @@ public final class JWTSignatureValidationUtil {
                 try {
                     final JWSVerifier verifier = initializeVerifier(algorithm, credential);
                     if (verifier == null) {
-                        log.error("No verifier for given JWT for alg {}", algorithm.getName());
+                        log.warn("No verifier for given JWT for alg {}", algorithm.getName());
                         return EventIds.INVALID_SEC_CFG;
                     }
                     if (signedJwt.verify(verifier)) {
@@ -132,7 +132,7 @@ public final class JWTSignatureValidationUtil {
                 }
             }
         }
-        log.error("Unable to validate given JWT with any of the credentials");
+        log.warn("Unable to validate given JWT with any of the credentials");
         return invalidJwtEventId;
     }
     

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.