Add more logging in prod (#144)

Author: mallport

.nais/prod/nais.yaml

@@ -215,6 +215,7 @@ data:
 
     logger:
       levels:
+        root: INFO
         io.micronaut.security: INFO
         no.ssb.dlp.pseudo.service: INFO
         io.micronaut.security.token.jwt.validator: DEBUG

src/main/java/no/ssb/dlp/pseudo/service/security/CustomRolesFinder.java

@@ -44,7 +44,7 @@ public List<String> resolveRoles(Map<String, Object> attributes) {
             email = Optional.ofNullable(Objects.toString(attributes.get(tokenConfiguration.getNameKey()), null));
         }
 
-        log.debug("User {} has a trusted issuer? {}", email, trustedIssuer);
+        log.info("User {} has a trusted issuer? {}", email, trustedIssuer);
 
         // We check for trustedIssuer when in environments where all authenticated requests are accepted
         // This is due to Google tokens being valid for authorization purposes,
@@ -67,14 +67,16 @@ public List<String> resolveRoles(Map<String, Object> attributes) {
         }
         if (rolesConfig.getUsersGroup().isPresent()) {
             final List<Membership> userMembers = cloudIdentityService.listMembers(rolesConfig.getUsersGroup().get());
+            List<String> userEmails = cloudIdentityService.listMembers(rolesConfig.getUsersGroup().get()).stream().map(v -> v.preferredMemberKey().id()).toList();
+            log.info("User group {} has members {}", rolesConfig.getUsersGroup().get(), userEmails);
             if (email.map(user_email -> userMembers.stream().anyMatch(value -> value.preferredMemberKey().id().equals(user_email))).orElse(false)) {
                 roles.add(PseudoServiceRole.USER);
             }
         }
         if (roles.isEmpty()) {
             log.info("Could not resolve any roles for user {}", email);
         }
-        log.debug("Resolved roles {} for user {}", roles, email);
+        log.info("Resolved roles {} for user {}", roles, email);
         return roles;
     }