-
Notifications
You must be signed in to change notification settings - Fork 5
Open
Description
Please add access logs. Format tbd.
Problem now is that misbehaving users are hard to pin down. For example, the log is flooding with errors like:
oidc.web.ErrorController:85 - Error has occurred: oidc.exceptions.UnknownCodeException: Invalid code: cDfzmtLJaxV5Ay22ufan4z6ifNSQGwVT invalid_code
but we cannot see who is sending the request
So, for each request, please add a line with the following info:
- date
- originating ip (from the lb)
- ip from X-Forwarded-For header
- http method
- requested path including GET parameters
- returned http status code
- oidc-endpoint that was called
- clientid of RP/RS
Format should be json
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Status
New