Open
Description
If OIDC page return non-OK status, the current behavior would log the body, which may fill up the disk if it's large enough.
https://github.com/coreos/go-oidc/blob/v3/oidc/oidc.go#L244-L246
Would it be OK not to log the body?
func (p *Provider) UserInfo
...
if resp.StatusCode != http.StatusOK {
return nil, fmt.Errorf("%s: %s", resp.Status, body)
}
}
Metadata
Metadata
Assignees
Labels
No labels