[java-idp-oidc] branch maint-4.3 updated: JOIDC-286 - Improve logging for expired sealed tokens

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch maint-4.3
in repository java-idp-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-oidc/commit/46fe0ba75f74440d507a0efa83484582528c72ae

The following commit(s) were added to refs/heads/maint-4.3 by this push:
     new 46fe0ba7 JOIDC-286 - Improve logging for expired sealed tokens
46fe0ba7 is described below

commit 46fe0ba75f74440d507a0efa83484582528c72ae
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Sep 17 08:04:48 2026 +0300

    JOIDC-286 - Improve logging for expired sealed tokens
    
    https://shibboleth.atlassian.net/browse/JOIDC-286
    
    Remove stack trace on INFO logging
---
 .../oidc/op/oauth2/profile/impl/AbstractProcessTokenAction.java       | 4 ++--
 .../plugin/oidc/op/profile/impl/ValidateRegistrationAccessToken.java  | 2 +-
 .../idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessToken.java    | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/AbstractProcessTokenAction.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/AbstractProcessTokenAction.java
index e71624e3..6f54d29d 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/AbstractProcessTokenAction.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oauth2/profile/impl/AbstractProcessTokenAction.java
@@ -282,7 +282,7 @@ public abstract class AbstractProcessTokenAction<T> extends AbstractOIDCRequestA
             assert dataSealer != null;
             return AccessTokenClaimsSet.parse(tokenValue, dataSealer).getClaimsSet();
         } catch (final DataExpiredException e) {
-            log.info("{} Opaque access token has expired", getLogPrefix(), e);
+            log.info("{} Opaque access token has expired", getLogPrefix());
         } catch (final DataSealerException | ParseException e) {
             
         }
@@ -306,7 +306,7 @@ public abstract class AbstractProcessTokenAction<T> extends AbstractOIDCRequestA
             assert dataSealer != null;
             return RefreshTokenClaimsSet.parse(refreshToken, dataSealer).getClaimsSet();
         } catch (final DataExpiredException e) {
-            log.info("{} Opaque refresh token has expired", getLogPrefix(), e);
+            log.info("{} Opaque refresh token has expired", getLogPrefix());
         } catch (final ParseException | DataSealerException e) {
         }
         for (final BiFunction<ProfileRequestContext, String, RefreshTokenClaimsSet> deserializer : 
diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ValidateRegistrationAccessToken.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ValidateRegistrationAccessToken.java
index b791775e..e389f8da 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ValidateRegistrationAccessToken.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ValidateRegistrationAccessToken.java
@@ -200,7 +200,7 @@ public class ValidateRegistrationAccessToken extends AbstractOIDCRequestAction<O
             log.debug("{} Access token unwrapped into {}", getLogPrefix(), unwrapped);
             claimsSet = objectMapper.readValue(unwrapped, RegistrationClaimsSet.class);
         } catch (final DataExpiredException e) {
-            log.warn("{} Decoding access token failed: token has expired", getLogPrefix(), e);
+            log.info("{} Decoding access token failed: token has expired", getLogPrefix());
             ActionSupport.buildEvent(profileRequestContext, OidcEventIds.INVALID_GRANT);
             return;
         } catch (final DataSealerException | JsonProcessingException e) {
diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessToken.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessToken.java
index 51680f51..94889886 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessToken.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessToken.java
@@ -227,7 +227,7 @@ public class ParseAccessToken extends AbstractOIDCUserInfoValidationResponseActi
             assert dataSealer != null;
             return AccessTokenClaimsSet.parse(tokenValue, dataSealer);
         } catch (final DataExpiredException e) {
-            log.info("{} Opaque access token has expired", getLogPrefix(), e);
+            log.info("{} Opaque access token has expired", getLogPrefix());
         } catch (final DataSealerException | ParseException e) {
             
         }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.