spring-projects / spring-projects/spring-security

Provide extendend SAML logging (like SAMLDefaultLogger)

Open
#11,592 4 comments 0 reactions 1 assignee View on GitHub

@jzheaux is already working on this.

Since Jan 10, 2023.

in: saml2 status: feedback-provided type: enhancement
Dominant language
Java
Stars
9.6k
Forks
6.3k
Avg merge
2d 11h
Merged PRs (30d)
52

Description

Expected Behavior

We would like to have the possibility to easily log SAML responses as with the (previous) SAMLLogger-API.

Current Behavior

We did not find a "standard" way of logging details of the SAML response.

Context

We are currently migrating from Spring Security SAML Extension to the new Spring Security Service Provider library. We have used a SAMLDefaultLogger bean to have an extensive logging of the SAML response (e.g. in the old SAMLAuthenticationProvider).
In the new library we did not find something like the old SAMLLogger-API and in the new OpenSamlAuthenticationProvider, the logger does only log pretty basic information.

Are you planning to port this feature or do you recommend overriding e.g. the AuthenticationProvider for adding more logging?
Thanks!

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.