[JIRA] (JOIDC-112) OP_OIDC_MESSAGES log appender to trace all the exchanged protocol messages

[Simone Avogadro (Jira)]

Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiNjY4YmNlNDQ5NzcwNGE3ZTk3ZWZkYTlmNWU2ODk3MmIiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/JOIDC-112?atlOrigin=eyJpIjoiNjY4YmNlNDQ5NzcwNGE3ZTk3ZWZkYTlmNWU2ODk3MmIiLCJwIjoiaiJ9 ) JOIDC-112 ( https://shibboleth.atlassian.net/browse/JOIDC-112?atlOrigin=eyJpIjoiNjY4YmNlNDQ5NzcwNGE3ZTk3ZWZkYTlmNWU2ODk3MmIiLCJwIjoiaiJ9 ) OP_OIDC_MESSAGES log appender to trace all the exchanged protocol messages ( https://shibboleth.atlassian.net/browse/JOIDC-112?atlOrigin=eyJpIjoiNjY4YmNlNDQ5NzcwNGE3ZTk3ZWZkYTlmNWU2ODk3MmIiLCJwIjoiaiJ9 )

Issue Type: New Feature Affects Versions: 3.1.2 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: Security Created: 30/May/22 9:45 AM Priority: Trivial Reporter: Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 )

For both regulatory and troubleshooting purposes customers are asking to log all the exchanged messages between the RP and the OP.

Ideally this would mean having some king of logback appender which tracks all the messages exchanged over all the endpoints:

* browser-centric endpoints
* API endpoints

Probably having a logback logger like OP_OIDC_MESSAGES (like IDP_SAML MESSAGES) would allow to take an approach very similar to the one used within the Shibboleth SAML

( https://shibboleth.atlassian.net/browse/JOIDC-112#add-comment?atlOrigin=eyJpIjoiNjY4YmNlNDQ5NzcwNGE3ZTk3ZWZkYTlmNWU2ODk3MmIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-112#add-comment?atlOrigin=eyJpIjoiNjY4YmNlNDQ5NzcwNGE3ZTk3ZWZkYTlmNWU2ODk3MmIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100198- sha1:3a5738a )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220530/f9a47e99/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-6c379bd3-396b-4b52-9c27-4ea1a5cba144
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220530/f9a47e99/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-05e9ffb6-8749-44fc-a9b3-5a887e7c61b5
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220530/f9a47e99/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-54b49be8-a44d-4429-b15f-4a67d9c4e9f1
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220530/f9a47e99/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-42fe9d73-e454-4c38-87ba-27055325dcb0
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220530/f9a47e99/attachment-0007.png>