From c7ea40170ca8b76f57301a7f59c490dd0e84c4fa Mon Sep 17 00:00:00 2001
From: Guy Halse <guy@tenet.ac.za>
Date: Tue, 25 Jul 2017 09:04:03 +0200
Subject: [PATCH] Skip logging statistics when we have a passive request
This is useful for preventing the consentAdmin module from generating a
lot of spurious saml20-idp-SSO logs as it passes passively through the
authproc filters to determine its attribute set.
---
modules/core/lib/Auth/Process/StatisticsWithAttribute.php | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/modules/core/lib/Auth/Process/StatisticsWithAttribute.php b/modules/core/lib/Auth/Process/StatisticsWithAttribute.php
index 3123ff709..517369c93 100644
--- a/modules/core/lib/Auth/Process/StatisticsWithAttribute.php
+++ b/modules/core/lib/Auth/Process/StatisticsWithAttribute.php
@@ -57,6 +57,11 @@ class sspmod_core_Auth_Process_StatisticsWithAttribute extends SimpleSAML_Auth_P
$source = 'NA';
$dest = 'NA';
+ if(array_key_exists('isPassive', $state) && $state['isPassive'] === true) {
+ // We have a passive request. Skip logging statistics
+ return;
+ }
+
if (array_key_exists($this->attribute, $state['Attributes'])) $logAttribute = $state['Attributes'][$this->attribute][0];
if (array_key_exists('Source', $state)) {
if (isset($state['Source']['core:statistics-id'])) {
--
GitLab