EPA-157: [ehealthid] Log private keys while booting in debug mode (#104)

oviva-ag · Oct 17, 2024 · de9d44f · de9d44f
1 parent 40a7b78
commit de9d44f
Showing 1 changed file with 17 additions and 2 deletions.
diff --git a/ehealthid-rp/src/main/java/com/oviva/ehealthid/relyingparty/Main.java b/ehealthid-rp/src/main/java/com/oviva/ehealthid/relyingparty/Main.java
@@ -196,8 +196,23 @@ private ConfigReader.Config replaceRelyingPartyKeys(ConfigReader.Config config)
 
     var keys = new JWKSet(List.of(signingKey, encKey));
 
-    logger.atDebug().log("openid_relying_party signing key, kid={}", signingKey.getKeyID());
-    logger.atDebug().log("openid_relying_party encryption key, kid={}", encKey.getKeyID());
+    logger
+        .atDebug()
+        .addKeyValue("kid", signingKey.getKeyID())
+        .addKeyValue("jwk", signingKey.toJSONString())
+        .log(
+            "openid_relying_party signing key, kid={} jwk={}",
+            signingKey.getKeyID(),
+            signingKey.toJSONString());
+
+    logger
+        .atDebug()
+        .addKeyValue("kid", encKey.getKeyID())
+        .addKeyValue("jwk", encKey.toJSONString())
+        .log(
+            "openid_relying_party encryption key, kid={} jwk={}",
+            encKey.getKeyID(),
+            encKey.toJSONString());
 
     var fedConfig =
         config