Unconditionally log public key on success

Yubico · Oct 10, 2023 · 069caee · 069caee
1 parent 7ae4196
commit 069caee
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/util.c b/util.c
@@ -20,6 +20,8 @@
 #include <unistd.h>
 #include <string.h>
 #include <arpa/inet.h>
+#include <syslog.h>
+#include <security/pam_ext.h>
 
 #include "b64.h"
 #include "debug.h"
@@ -1254,6 +1256,7 @@ int do_authentication(const cfg_t *cfg, const device_t *devices,
           }
           r = fido_assert_verify(assert, 0, pk.type, pk.ptr);
           if (r == FIDO_OK) {
+            pam_syslog(pamh, LOG_INFO, "Successful FIDO authentication with publicKey %s (idx %u)", devices[i].publicKey, i);
             retval = 1;
             goto out;
           }