[java-idp-oidc] 01/03: JOIDC-286 - Improve logging for expired sealed tokens

Codeberg noreply at shibboleth.net
Mon Sep 14 14:31:44 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch maint-4.3
in repository java-idp-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-oidc/commit/2952a11a696783f35f1a6e51ec2fd783676db927

commit 2952a11a696783f35f1a6e51ec2fd783676db927
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Mon Sep 14 17:22:49 2026 +0300

    JOIDC-286 - Improve logging for expired sealed tokens
    
    https://shibboleth.atlassian.net/browse/JOIDC-286
    
    Simplify the logging for opaque PAR request_uri deserialization and add missing return statement
---
 .../DefaultPushedAuthorizationRequestUriDeserializationFunction.java  | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/DefaultPushedAuthorizationRequestUriDeserializationFunction.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/DefaultPushedAuthorizationRequestUriDeserializationFunction.java
index b4976808..106f0a12 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/DefaultPushedAuthorizationRequestUriDeserializationFunction.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/DefaultPushedAuthorizationRequestUriDeserializationFunction.java
@@ -156,7 +156,9 @@ public class DefaultPushedAuthorizationRequestUriDeserializationFunction
                 }
                 return result;
             } catch (final DataExpiredException e) {
-                log.info("The contents of the requst_uri has expired: {}", uri.toString(), e);
+                log.info("The opaque requst_uri has expired");
+                log.debug("Expired request_uri: {}", uri.toString(), e);
+                return null;
             } catch (final DataSealerException e) {
                 log.debug("Could not decrypt the contents of the request_uri {}", uri.toString(), e);
                 return null;

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list