Debug: Log cb validation stuff

This is meant to be temporary. Rotate cb secret afterwards.
digitalservicebund · Oct 31, 2024 · 0a8af70 · 0a8af70
1 parent 6f9100a
commit 0a8af70
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/src/main/java/de/bund/digitalservice/a2j/service/subscriber/CallbackVerificationFilter.java b/src/main/java/de/bund/digitalservice/a2j/service/subscriber/CallbackVerificationFilter.java
@@ -43,17 +43,20 @@ protected void doFilterInternal(
     String requestBody =
         new String(wrappedRequest.getContentAsByteArray(), request.getCharacterEncoding());
 
+    String hmac = request.getHeader("callback-authentication");
+
     ValidationResult result =
         senderClient.validateCallback(
-            request.getHeader("callback-authentication"),
+            hmac,
             Long.parseLong(request.getHeader("callback-timestamp")),
             requestBody,
             callbackSecret);
 
     if (!result.isValid()) {
       logger.info("Received invalid fit-connect callback");
-      logger.info(result.getProblems().toString());
-      logger.info(result.getError().getMessage());
+      logger.info("hmac: " + hmac);
+      logger.info("body: " + requestBody);
+      logger.info("Validation Error: " + result.getError().getMessage());
       response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
       return;
     }