fix: authorization filter is logging incorrect username (#3138)

confluentinc · Jul 29, 2019 · b15c6d0 · b15c6d0
1 parent e187e55
commit b15c6d0
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/...rest-app/src/main/java/io/confluent/ksql/rest/server/filters/KsqlAuthorizationFilter.java b/...rest-app/src/main/java/io/confluent/ksql/rest/server/filters/KsqlAuthorizationFilter.java
@@ -47,7 +47,8 @@ public void filter(final ContainerRequestContext requestContext) {
     try {
       authorizationProvider.checkEndpointAccess(user, method, path);
     } catch (final Throwable t) {
-      log.warn(String.format("User:%s is denied access to \"%s %s\"", user, method, path), t);
+      log.warn(String.format("User:%s is denied access to \"%s %s\"",
+          user.getName(), method, path), t);
       requestContext.abortWith(Errors.accessDenied(t.getMessage()));
     }
   }

diff --git a/...-app/src/main/java/io/confluent/ksql/rest/server/resources/streaming/WSQueryEndpoint.java b/...-app/src/main/java/io/confluent/ksql/rest/server/resources/streaming/WSQueryEndpoint.java
@@ -277,7 +277,7 @@ private void checkAuthorization(final Session session) {
             provider.checkEndpointAccess(user, method, path);
           } catch (final Throwable t) {
             log.warn(String.format("User:%s is denied access to Websocket "
-                + "%s endpoint", user, path), t);
+                + "%s endpoint", user.getName(), path), t);
             throw new KsqlException(t);
           }
         }