auth: Add debug logging for auth token details

diff --git a/src/auth/auth-request-handler.c b/src/auth/auth-request-handler.c
index 17fd46720234baec3a6fa1d175f077e1c9ec18e4..04359c365d2282abf07d6a3141ba94c987de952e 100644 (file)
--- a/src/auth/auth-request-handler.c
+++ b/src/auth/auth-request-handler.c
@@ -864,11 +864,16 @@ static void auth_str_append_userdb_extra_fields(struct auth_request *request,
        /* generate auth_token when master service provided session_pid */
        if (request->request_auth_token &&
            request->session_pid != (pid_t)-1) {
+               const char *auth_token_pid = dec2str(request->session_pid);
                const char *auth_token =
-                       auth_token_get(request->fields.protocol,
-                                      dec2str(request->session_pid),
+                       auth_token_get(request->fields.protocol, auth_token_pid,
                                       request->fields.user,
                                       request->fields.session_id);
+               e_debug(request->event, "Token requested: service=%s "
+                       "username=%s session_pid=%s session_id=%s "
+                       "token=%s", request->fields.protocol,
+                       request->fields.user, auth_token_pid,
+                       request->fields.session_id, auth_token);
                auth_str_add_keyvalue(dest, "auth_token", auth_token);
        }
        if (request->fields.master_user != NULL) {

diff --git a/src/auth/auth-sasl-mech-dovecot-token.c b/src/auth/auth-sasl-mech-dovecot-token.c
index 60310af26f091efae9d6b5a14a89e94e538e1de8..37472150b7a6e4fd1266ab2b2f6d04689a8f7b9c 100644 (file)
--- a/src/auth/auth-sasl-mech-dovecot-token.c
+++ b/src/auth/auth-sasl-mech-dovecot-token.c
@@ -66,6 +66,11 @@ mech_dovecot_token_auth_continue(struct sasl_server_mech_request *request,
                                service, "");
                        sasl_server_request_success(request, NULL, 0);
                } else {
+                       e_debug(request->event, "Token mismatch: service=%s "
+                               "username=%s session_pid=%s session_id=%s "
+                               "token=%s != %s",
+                               service, request->authid, pid, session_id,
+                               auth_token, valid_token);
                        sasl_server_request_failure(request);
                }
        }