[java-idp-oidc] branch main updated: Add some additional logging for claims settings.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=404ea9880640a3916ad8597481d9e3206f181d6f

The following commit(s) were added to refs/heads/main by this push:
     new 404ea988 Add some additional logging for claims settings.
404ea988 is described below

commit 404ea9880640a3916ad8597481d9e3206f181d6f
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Feb 12 12:15:20 2024 -0500

    Add some additional logging for claims settings.
---
 .../idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSet.java    | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSet.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSet.java
index 53f28414..3f26f530 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSet.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSet.java
@@ -268,7 +268,7 @@ public class AddAttributesToClaimsSet extends AbstractOIDCResponseAction {
         }
         
         if (claimsSet instanceof IDTokenClaimsSet) {
-            final Object msg = profileRequestContext.getInboundMessageContext().getMessage();
+            final Object msg = profileRequestContext.ensureInboundMessageContext().getMessage();
             if (msg instanceof AuthenticationRequest) {
                 final ResponseType responseType = ((AuthenticationRequest) msg).getResponseType();
                 addToIDTokenByDefault = responseType.contains(OIDCResponseTypeValue.ID_TOKEN)
@@ -280,13 +280,16 @@ public class AddAttributesToClaimsSet extends AbstractOIDCResponseAction {
                 alwaysIncludedAttributes = Collections.emptySet();
             }
             deniedUserInfoAttributes = Collections.emptySet();
+            log.debug("{} ID token always including claims: {}", getLogPrefix(), alwaysIncludedAttributes);
         } else if (claimsSet instanceof UserInfo) {
             deniedUserInfoAttributes = deniedUserInfoAttributesLookupStrategy.apply(profileRequestContext);
             if (deniedUserInfoAttributes == null) {
                 deniedUserInfoAttributes = Collections.emptySet();
             }
             alwaysIncludedAttributes = Collections.emptySet();
+            log.debug("{} UserInfo denied claims: {}", getLogPrefix(), deniedUserInfoAttributes);
         }
+        
         return true;
     }
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.