[JIRA] (JOIDC-112) OP_OIDC_MESSAGES log appender to trace all the exchanged protocol messages

[Simone Avogadro (Jira)]

Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 ) *commented* on JOIDC-112 ( https://shibboleth.atlassian.net/browse/JOIDC-112?atlOrigin=eyJpIjoiMWI4MTYyMTc1YmJjNDJkMmExMWI2MzJhZjJmN2ZiOTQiLCJwIjoiaiJ9 )

Re: OP_OIDC_MESSAGES log appender to trace all the exchanged protocol messages ( https://shibboleth.atlassian.net/browse/JOIDC-112?atlOrigin=eyJpIjoiMWI4MTYyMTc1YmJjNDJkMmExMWI2MzJhZjJmN2ZiOTQiLCJwIjoiaiJ9 )

For regulatory purposes the conversation must be logged and stored for 24 months, I’m not aware of any need to log unencrypted contents. It’s probably even better to NOT have them in the very same context because some clients may forbid logging them, so any way to be able to distinguish them (e.g. different log level or sublass logger) would surely make sense.

As for my understanding in case the logs need be brought before the law it will be RP’s responsibility to have all the needed keys to decode encrypted messages

( https://shibboleth.atlassian.net/browse/JOIDC-112#add-comment?atlOrigin=eyJpIjoiMWI4MTYyMTc1YmJjNDJkMmExMWI2MzJhZjJmN2ZiOTQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-112#add-comment?atlOrigin=eyJpIjoiMWI4MTYyMTc1YmJjNDJkMmExMWI2MzJhZjJmN2ZiOTQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100200- sha1:9199305 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220611/0c4a6348/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-10635314-caae-4cc7-a92f-bc536f975232
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220611/0c4a6348/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-348b445d-1be8-4cf2-8884-c4292b88a964
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220611/0c4a6348/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-16b75b7d-63bd-453d-ad75-1949c674cce1
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220611/0c4a6348/attachment-0005.png>