Skip to content

SEC-3106: Option in BasicAuthenticationFilter to log more exception info #3308

Closed
@spring-projects-issues

Description

@spring-projects-issues

Bill Chen (Migrated from SEC-3106) said:

The current code in doFilterInternal() logs in this way:

logger.debug("Authentication request for failed: " + failed);

which, in most cases just produces: "Authentication request for failed: org.springframework.security.authentication.BadCredentialsException: Bad credentials". This is neither a correct sentence nor useful for debugging.

Could it be changed so it logs the stack at trace level or something?

Metadata

Metadata

Assignees

Labels

in: webAn issue in web modules (web, webmvc)type: enhancementA general enhancementtype: jiraAn issue that was migrated from JIRA

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions