Error-log all SAML assertion auth failures
SAML refusals are shown as generic authentication_failed, so log them at Error for investigation and drop the unused SAML error code mapper. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>
This commit is contained in:
committed by
Cursor Agent
parent
6cce9b0a6e
commit
981ed91572
@@ -60,12 +60,6 @@ func (h *SAMLHandler) renderInternalServerError(w http.ResponseWriter) {
|
||||
}
|
||||
|
||||
func (h *SAMLHandler) renderAssertionError(w http.ResponseWriter, r *http.Request, err error) {
|
||||
if code, ok := authErrorCodeFromSAML(err); ok {
|
||||
redirectAuthError(w, r, code)
|
||||
|
||||
return
|
||||
}
|
||||
|
||||
h.logger.ErrorCtx(r.Context(), "cannot handle SAML assertion", log.Error(err))
|
||||
redirectAuthError(w, r, authErrorAuthenticationFailed)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user