pr comments

This commit is contained in:
jay brown
2025-04-18 11:11:58 -07:00
parent 948f693130
commit 9562b9239d
+5 -8
View File
@@ -178,18 +178,15 @@ func handleOAuthCallback(c echo.Context, config auth.ConfigProvider) error {
userGroups = []string{} // Initialize as empty array
}
// Debug logging for tokens
if os.Getenv("DEBUG") == "true" {
// Log decoded token for debugging
config.GetAuthLogger().Info("ID Token Claims", "claims", idTokenClaims)
config.GetAuthLogger().Info("Raw ID Token", "token", tokens.IDToken)
config.GetAuthLogger().Info("Raw Access Token", "token", tokens.AccessToken)
}
// Log decoded token for debugging
config.GetAuthLogger().Debug("ID Token Claims", "claims", idTokenClaims)
config.GetAuthLogger().Debug("Raw ID Token", "token", tokens.IDToken)
config.GetAuthLogger().Debug("Raw Access Token", "token", tokens.AccessToken)
// Check authorization
authorized, requiredGroups := checkPermissions(config.GetAuthCallbackPath(), userGroups, config.GetAuthRoutePermissions(), config.GetAuthLogger())
if !authorized {
config.GetAuthLogger().Warn("OAuth callback - access denied",
config.GetAuthLogger().Debug("OAuth callback - access denied",
"user", idTokenClaims["cognito:username"],
"groups", userGroups,
"required", requiredGroups)