Unverified Commit 01cbccdd authored by Marius van den Beek's avatar Marius van den Beek Committed by GitHub
Browse files

Merge pull request #19966 from kysrpex/oidc_tokens_logs 

[23.1] Do not print OIDC access tokens to the logs
parents 1955d288 ff68c732

lib/galaxy/authnz/custos_authnz.py

+0 −1
Original line number Diff line number Diff line
@@ -80,7 +80,6 @@ class CustosAuthnz(IdentityProvider): 
        # do not refresh tokens if they didn't reach their half lifetime

        if int(id_token_decoded["iat"]) + int(id_token_decoded["exp"]) > 2 * int(time.time()):

            return False

        log.info(custos_authnz_token.access_token)

        oauth2_session = self._create_oauth2_session()

        token_endpoint = self.config["token_endpoint"]

        if self.config.get("iam_client_secret"):