openid
Strip logging for non-trace errors
For OpenID Connect (OIDC) implementations, it is recommended to remove any logging from release builds for security and performance reasons. During my investigation of this project, I identified two log messages that were not covered by the newly introduced request trace mechanism, which was designed to allow logging only for debugging purposes.
This improvement aims to enhance security by ensuring that sensitive or unnecessary logs are not present in release builds.
Request: If these log messages are intentional and have a specific purpose, please provide an explanation of why they should remain. Your feedback will help clarify their necessity.
Can we please have some feedback on this? Or better, an approval so it can be merged and go into an upcoming release?
Can we please have some feedback on this? Or better, an approval so it can be merged and go into an upcoming release?
Someone from the core team should review this pull request.
