[java-oidc-common] branch main updated: Log on WARN if the incoming JWT was not encrypted and encryption is not optional.

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=01fa771ad722cd3dbdd3bdd2fa92c6ab5ea74a17

The following commit(s) were added to refs/heads/main by this push:
     new 01fa771  Log on WARN if the incoming JWT was not encrypted and encryption is not optional.
01fa771 is described below

commit 01fa771ad722cd3dbdd3bdd2fa92c6ab5ea74a17
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Apr 21 16:37:33 2023 +0300

    Log on WARN if the incoming JWT was not encrypted and encryption is not optional.
---
 .../oidc/security/impl/CheckClientJWTDecryptionConfiguration.java     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/CheckClientJWTDecryptionConfiguration.java b/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/CheckClientJWTDecryptionConfiguration.java
index 3f1e0bd..aee24bc 100644
--- a/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/CheckClientJWTDecryptionConfiguration.java
+++ b/oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/impl/CheckClientJWTDecryptionConfiguration.java
@@ -187,8 +187,8 @@ public class CheckClientJWTDecryptionConfiguration extends AbstractProfileAction
                         getLogPrefix());
                 return false;
             } else {
-                log.debug("{} Extracted JWT was not an EncryptedJWT and encryption is not optional, cannot proceed",
-                    getLogPrefix());
+                log.warn("{} Extracted JWT was not an EncryptedJWT and encryption is not optional, publishing {}",
+                    getLogPrefix(), errorEventId);
                 ActionSupport.buildEvent(profileRequestContext, errorEventId);
                 return false;
             }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.