[KNOX-2382] Log the token when it's expired

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.5.0
• Component/s: Server
• Assignee: Sandor Molnar
• Reporter: Sandor Molnar
• Created: 08/Jun/20 15:12
• Updated: 23/Jun/20 04:57
• Resolved: 23/Jun/20 04:57

Description

When a Knox Token is issued vie the TokenResource a useful message is displayed in the log with an obfuscated token representation. For instance:

2020-06-08 10:54:36,106 INFO  service.knoxtoken (TokenResource.java:getAuthenticationToken(390)) - Knox Token service (dt) issued token eyJhbG...sTtTEz (7f876ed1-419a-4e90-a9ae-14d8d8a776a6)

Within AbstractJWTFilter, when Knox realizes a token is expired, the following message is shown:

2020-06-08 10:54:37,111 INFO  federation.jwt (AbstractJWTFilter.java:validateToken(301)) - Access token has expired; a new one must be acquired.

It'd be extremely useful to show the same obfuscated token representation here too.

Issue Links

• links to: GitHub Pull Request #352