diff --git a/jans-auth-server/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java b/jans-auth-server/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java index eb4d1d6799d..8733ae0b1ca 100644 --- a/jans-auth-server/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java +++ b/jans-auth-server/server/src/main/java/io/jans/as/server/authorize/ws/rs/AuthorizeRestWebServiceImpl.java @@ -288,7 +288,7 @@ private Response requestAuthorization(AuthzRequest authzRequest) { builder = authorize(authzRequest); } catch (WebApplicationException e) { applicationAuditLogger.sendMessage(authzRequest.getAuditLog()); - if (log.isErrorEnabled()) + if (log.isErrorEnabled() && canLogWebApplicationException(e)) log.error(e.getMessage(), e); throw e; } catch (AcrChangedException e) { // Acr changed @@ -322,6 +322,14 @@ private Response requestAuthorization(AuthzRequest authzRequest) { return builder.build(); } + private static boolean canLogWebApplicationException(WebApplicationException e) { + if (e == null || e.getResponse() == null) { + return false; + } + final int status = e.getResponse().getStatus(); + return status != 302; + } + private ResponseBuilder authorize(AuthzRequest authzRequest) throws AcrChangedException, SearchException, TokenBindingParseException { String tokenBindingHeader = authzRequest.getHttpRequest().getHeader("Sec-Token-Binding"); List prompts = Prompt.fromString(authzRequest.getPrompt(), " ");