I was reviewing my application logs and noticed that some personal user data is being logged by the openid_connect module, as it logs the user authentication response at https://git.drupalcode.org/project/openid_connect/-/blob/3.x/src/Plugin/....
To minimise collected user data, I want to avoid logging this information. While disabling debug logging could address this, I created this issue in case others also see it as a valid concern.
Remove the log message.
None
None
None
Show commandsStart within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
changes
Comments
Comment #3
pfrillingThanks for the fix. I agree, this logging should not be included.
Comment #4
pfrillingAttributing credit