Log full error message returned from OAuth service providers

[robes]

In our recently encountered errors in the OAuth authentication flow with Globus, we got back an error from Globus but didn't log the full error message. This limited our ability to report more details and debug fully.

[karlcz]

I think you're talking about this kind of failure observed in some of our systems 2017-07-17:

Got <class 'urllib2.HTTPError'> exception HTTP Error 401: Unauthorized while getting token (url https://auth.globus.org/v2/oauth2/token...

which is coming out of:

File "/usr/lib/python2.7/site-packages/webauthn2/providers/oauth2.py", line 401, in open_url

is that correct?

[robes]

That's correct.

[ljpearlman]

I don't think there's any additional information to log. I believe people thought there was because the logs include the amount of data sent with the request, and people thought that was the amount of data received.