From 069caee57f5a6e263eacb45f6f1fab5577a7b7e1 Mon Sep 17 00:00:00 2001
From: "Thomas M. DuBuisson" <tdubuisson@paxos.com>
Date: Mon, 9 Oct 2023 15:22:06 -0700
Subject: [PATCH] Unconditionally log public key on success

---
 util.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/util.c b/util.c
index f3ea20f..bd4b40e 100644
--- a/util.c
+++ b/util.c
@@ -20,6 +20,8 @@
 #include <unistd.h>
 #include <string.h>
 #include <arpa/inet.h>
+#include <syslog.h>
+#include <security/pam_ext.h>
 
 #include "b64.h"
 #include "debug.h"
@@ -1254,6 +1256,7 @@ int do_authentication(const cfg_t *cfg, const device_t *devices,
           }
           r = fido_assert_verify(assert, 0, pk.type, pk.ptr);
           if (r == FIDO_OK) {
+            pam_syslog(pamh, LOG_INFO, "Successful FIDO authentication with publicKey %s (idx %u)", devices[i].publicKey, i);
             retval = 1;
             goto out;
           }