Browse Source

Remove Logging of Untrusted Data

Josh Cummings 2 years ago
parent
commit
fed3de8dce

+ 1 - 2
oauth2/oauth2-resource-server/src/main/java/org/springframework/security/oauth2/server/resource/authentication/JwtIssuerAuthenticationManagerResolver.java

@@ -227,8 +227,7 @@ public final class JwtIssuerAuthenticationManagerResolver implements Authenticat
 				return authenticationManager;
 				return authenticationManager;
 			}
 			}
 			else {
 			else {
-				this.logger.debug(LogMessage
-						.format("Did not resolve AuthenticationManager since issuer is not trusted", issuer));
+				this.logger.debug("Did not resolve AuthenticationManager since issuer is not trusted");
 			}
 			}
 			return null;
 			return null;
 		}
 		}

+ 1 - 2
oauth2/oauth2-resource-server/src/main/java/org/springframework/security/oauth2/server/resource/authentication/JwtIssuerReactiveAuthenticationManagerResolver.java

@@ -221,8 +221,7 @@ public final class JwtIssuerReactiveAuthenticationManagerResolver
 		@Override
 		@Override
 		public Mono<ReactiveAuthenticationManager> resolve(String issuer) {
 		public Mono<ReactiveAuthenticationManager> resolve(String issuer) {
 			if (!this.trustedIssuer.test(issuer)) {
 			if (!this.trustedIssuer.test(issuer)) {
-				this.logger.debug(LogMessage
-						.format("Did not resolve AuthenticationManager since issuer is not trusted", issuer));
+				this.logger.debug("Did not resolve AuthenticationManager since issuer is not trusted");
 				return Mono.empty();
 				return Mono.empty();
 			}
 			}
 			// @formatter:off
 			// @formatter:off