chore: suppress user OIDC request errors (#865)

Add new error patterns to suppress OIDC request errors caused by issues on the user's end.
cds-snc · Oct 11, 2024 · 9995021 · 9995021
1 parent 924fd3b
commit 9995021
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/aws/alarms/locals.tf b/aws/alarms/locals.tf
@@ -6,8 +6,10 @@ locals {
     "level=ERROR"
   ]
   idp_error_ignore = [
-    "context canceled",        # user cancels request before it completes
-    "Errors.AuthNKey.NotFound" # user requests an access token with an invalid key
+    "context canceled",         # user cancels request before it completes
+    "Errors.AuthNKey.NotFound", # user requests an access token with an invalid key
+    "oidc.Time*cannot parse",   # user sends a JWT with a malformed epoch time
+    "token has expired"         # user access token has expired
   ]
   idp_error_pattern = "[(w1=\"*${join("*\" || w1=\"*", local.idp_error)}*\") && w1!=\"*${join("*\" && w1!=\"*", local.idp_error_ignore)}*\"]"