JR64920: VALUE OF JWT ACCESS TOKEN IS LOGGED IN APPLICATION LOG FILE

APAR status

• Closed as program error.

Error description

• The entire JSON response for when Case API is fetching the
  identity token, and it includes the JSON Web Token (JWT) access
  token, is logged in application log file.
  
  An example of this in the application log file:
  
  [2022-04-25T05:47:17.616+0000] 00001835 com.ibm.casemgmt.api
  I Trying to fetch zen auth token
  [2022-04-25T05:47:17.617+0000] 00001835 com.ibm.casemgmt.api
  I Token URL https://<server>/idprovider/v1/auth/identitytoken
  [2022-04-25T05:47:17.864+0000] 00001835 com.ibm.casemgmt.api
  I Response code : 200
  [2022-04-25T05:47:17.865+0000] 00001835 com.ibm.casemgmt.api
  I Response Message : OK
  [2022-04-25T05:47:17.866+0000] 00001835 com.ibm.casemgmt.api
  I JSON response is :
  {"access_token":"4e60............32f4","token_type":"Bearer","ex
  pires_in":43199,"scope"
  :"openid","refresh_token":"ANgL...GkC1X","id_token":"sha256~DpC
  v...I1Oo2wdV"}
  
  PRODUCTS AFFECTED
  IBM Cloud Pak for Business Automation
  

Local fix

Problem summary

• No additional information is available.
  

Problem conclusion

• A fix is available or will be available that ensures the JWT
  access token is not logged in the application logs.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLOUD PAK FOR A

• Fixed component ID

  5737I2300

Applicable component levels