OpenID Connect - debug payload

General Feedback
1

Hi!

I have a problem with getting roles from the JWT payload. I got the error in Elasticsearch logs:

c.a.d.a.h.j.AbstractHTTPJwtAuthenticator] [elasticsearch] Failed to get roles from JWT claims with roles_key 'roles'. Check if this key is correct and available in the JWT payload.

It seems that my provider doesn’t include roles information to JWT but this information is available by another endpoint /userinfo. But I would like to check this by debugging what includes the JWT token. So I have a question is there any possibility to achieve this?

2

@plotek It would seem this should be possible using below lines in log4j2.properties file:

logger.opendistro_security.name = com.amazon.dlic.auth.http.jwt
logger.opendistro_security.level = trace

However I have not been able to get the actual JWT produced.

I would recommend to raise a bug ticket for the dev team using below: