chore(log-txn): Log txn from RAS access token

uc-cdis · Jun 22, 2021 · 1895e21 · 1895e21
1 parent 5206c04
commit 1895e21
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/fence/resources/openid/ras_oauth2.py b/fence/resources/openid/ras_oauth2.py
@@ -90,6 +90,14 @@ def get_user_id(self, code):
                 options={"verify_aud": False, "verify_at_hash": False},
             )
 
+            # Log txn in access token for RAS ISA compliance
+            at_claims = jose_jwt.decode(
+                token["access_token"], keys, options={"verify_aud": False}
+            )
+            self.logger.info(
+                "Received RAS access token with txn: {}".format(at_claims.get("txn"))
+            )
+
             username = None
             if userinfo.get("UserID"):
                 username = userinfo["UserID"]