fix: do not send debug on session/whoami

Closes #483
ory · Jul 2, 2020 · 16d3670 · 16d3670
1 parent 2609002
commit 16d3670
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/session/handler.go b/session/handler.go
@@ -18,6 +18,7 @@ type (
 	handlerDependencies interface {
 		ManagementProvider
 		x.WriterProvider
+		x.LoggingProvider
 	}
 	HandlerProvider interface {
 		SessionHandler() *Handler
@@ -73,9 +74,9 @@ func (h *Handler) RegisterAdminRoutes(admin *x.RouterAdmin) {
 func (h *Handler) whoami(w http.ResponseWriter, r *http.Request, ps httprouter.Params) {
 	s, err := h.r.SessionManager().FetchFromRequest(r.Context(), r)
 	if err != nil {
+		h.r.Audit().WithRequest(r).WithError(err).Info("No valid session cookie found.")
 		h.r.Writer().WriteError(w, r,
-			errors.WithStack(herodot.ErrUnauthorized.WithReasonf("No valid session cookie found.").WithDebugf("%+v", err)),
-		)
+			errors.WithStack(herodot.ErrUnauthorized.WithReasonf("No valid session cookie found.")))
 		return
 	}