Skip to content

Missing access logs #225

@baszoetekouw

Description

@baszoetekouw

Please add access logs. Format tbd.

Problem now is that misbehaving users are hard to pin down. For example, the log is flooding with errors like:

 oidc.web.ErrorController:85 - Error has occurred: oidc.exceptions.UnknownCodeException: Invalid code: cDfzmtLJaxV5Ay22ufan4z6ifNSQGwVT invalid_code

but we cannot see who is sending the request

So, for each request, please add a line with the following info:

  • date
  • originating ip (from the lb)
  • ip from X-Forwarded-For header
  • http method
  • requested path including GET parameters
  • returned http status code
  • oidc-endpoint that was called
  • clientid of RP/RS

Format should be json

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status

    New

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions