pr comments
This commit is contained in:
@@ -178,18 +178,15 @@ func handleOAuthCallback(c echo.Context, config auth.ConfigProvider) error {
|
||||
userGroups = []string{} // Initialize as empty array
|
||||
}
|
||||
|
||||
// Debug logging for tokens
|
||||
if os.Getenv("DEBUG") == "true" {
|
||||
// Log decoded token for debugging
|
||||
config.GetAuthLogger().Info("ID Token Claims", "claims", idTokenClaims)
|
||||
config.GetAuthLogger().Info("Raw ID Token", "token", tokens.IDToken)
|
||||
config.GetAuthLogger().Info("Raw Access Token", "token", tokens.AccessToken)
|
||||
}
|
||||
// Log decoded token for debugging
|
||||
config.GetAuthLogger().Debug("ID Token Claims", "claims", idTokenClaims)
|
||||
config.GetAuthLogger().Debug("Raw ID Token", "token", tokens.IDToken)
|
||||
config.GetAuthLogger().Debug("Raw Access Token", "token", tokens.AccessToken)
|
||||
|
||||
// Check authorization
|
||||
authorized, requiredGroups := checkPermissions(config.GetAuthCallbackPath(), userGroups, config.GetAuthRoutePermissions(), config.GetAuthLogger())
|
||||
if !authorized {
|
||||
config.GetAuthLogger().Warn("OAuth callback - access denied",
|
||||
config.GetAuthLogger().Debug("OAuth callback - access denied",
|
||||
"user", idTokenClaims["cognito:username"],
|
||||
"groups", userGroups,
|
||||
"required", requiredGroups)
|
||||
|
||||
Reference in New Issue
Block a user