Improve AuthenticatorStatusValidators logging

OpenConext · Apr 15, 2024 · 3381377 · 3381377
1 parent b20b070
commit 3381377
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/src/Service/AuthenticatorStatusValidator.php b/src/Service/AuthenticatorStatusValidator.php
@@ -23,6 +23,7 @@
 use Surfnet\Webauthn\Exception\AuthenticatorStatusNotSupportedException;
 use Webauthn\MetadataService\Statement\AuthenticatorStatus;
 use Webauthn\MetadataService\Statement\StatusReport;
+use function array_walk;
 
 class AuthenticatorStatusValidator
 {
@@ -56,18 +57,22 @@ public function validate(array $statusReports): void
     {
         $meetsRequirement = false;
         $reportsProcessed = 0;
+        $reportLog = [];
         foreach ($statusReports as $report) {
             if (in_array($report->status, $this->allowedStatus)) {
                 $meetsRequirement = true;
             }
             $reportsProcessed++;
+            $reportLog[] = $report->status;
         }
 
         if (!$meetsRequirement) {
             throw new AuthenticatorStatusNotSupportedException(
                 sprintf(
-                    'Of the %d StatusReports tested, none met one of the required FIDO Certified statuses',
-                    $reportsProcessed
+                    'Of the %d StatusReports tested, none met one of the required FIDO Certified statuses. ' .
+                    'Reports tested: "%s"',
+                    $reportsProcessed,
+                    implode(', ', $reportLog)
                 )
             );
         }