Log user, token info in access.log

[bodtx]

Hello, apache can output user logged in with basic auth with %u in LogFormat:

LogFormat "%h %l %t %u \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" userLog

here %u is displaying ([sub]@[iss])

Is there a way to display others info from JWT token (mail, roles)?
(BTW I have no PHP mode enabled)

thx

[zandbelt]

you should be able to reference the environment variables set by mod_auth_openidc by using e.g. %{OIDC_CLAIM_email}e

[hmoffatt]

On 26/11/22 02:00, bodtx wrote: Hello, apache can output user logged in with basic auth with %u in LogFormat: |LogFormat "%h %l %t %u \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" userLog| here %u is not working Is there a way to display the connected user or show some info from JWT token (mail, roles)? (BTW I have no PHP mode enabled)

I have the following in my config, and I get the username logged in %u: OIDCRemoteUserClaim preferred_username Hamish

[bodtx]

Thank you indeed with
%{OIDC_CLAIM_XXX}e

where XXX is any key from id token, I cans log whatever I want.