From 5a6dc1fb81bf223750f42f4697f3cd7d86b39e71 Mon Sep 17 00:00:00 2001
From: Frederick Muriuki Muriithi
Date: Tue, 5 Nov 2024 10:24:19 -0600
Subject: Debug: Add debug logging to trace JWK fetching.

---
 .../authentication/oauth2/models/oauth2client.py   | 25 ++++++++++++++++------
 1 file changed, 18 insertions(+), 7 deletions(-)

(limited to 'gn_auth')

diff --git a/gn_auth/auth/authentication/oauth2/models/oauth2client.py b/gn_auth/auth/authentication/oauth2/models/oauth2client.py
index df5d564..615d0ee 100644
--- a/gn_auth/auth/authentication/oauth2/models/oauth2client.py
+++ b/gn_auth/auth/authentication/oauth2/models/oauth2client.py
@@ -13,6 +13,7 @@ from authlib.jose import KeySet, JsonWebKey
 from authlib.oauth2.rfc6749 import ClientMixin
 from pymonad.maybe import Just, Maybe, Nothing
 
+from gn_auth.debug import __pk__, getLogger
 from gn_auth.auth.db import sqlite3 as db
 from gn_auth.auth.errors import NotFoundError
 from gn_auth.auth.authentication.users import (User,
@@ -61,10 +62,19 @@ class OAuth2Client(ClientMixin):
 
     def jwks(self) -> KeySet:
         """Return this client's KeySet."""
+        logger = getLogger(__name__)
         jwksuri = self.client_metadata.get("public-jwks-uri")
-        if not bool(jwksuri):
-            logging.debug("No Public JWKs URI set for client!")
-            return KeySet([])
+        ### ----- DEBUG: Remove this section ----- ###
+        import os
+        from pathlib import Path
+        ca_bundle = Path(os.environ.get("REQUESTS_CA_BUNDLE"))
+        __pk__(f"{ca_bundle} exists?", ca_bundle.exists())
+        ### ----- DEBUG: Remove this section ----- ###
+        if not bool(__pk__(
+                f"CLIENT'S ({self.client_id}) JWKs URI =======> ", jwksuri)):
+            logger.debug("No Public JWKs URI set for client!")
+            return __pk__("Return empty KeySet since URI is not set =====>",
+                          KeySet([]))
         try:
             ## IMPORTANT: This can cause a deadlock if the client is working in
             ##            single-threaded mode, i.e. can only serve one request
@@ -72,15 +82,16 @@ class OAuth2Client(ClientMixin):
             return KeySet([JsonWebKey.import_key(key)
                            for key in requests.get(jwksuri).json()["jwks"]])
         except requests.ConnectionError as _connerr:
-            logging.debug(
+            logger.debug(
                 "Could not connect to provided URI: %s", jwksuri, exc_info=True)
         except JSONDecodeError as _jsonerr:
-            logging.debug(
+            logger.debug(
                 "Could not convert response to JSON", exc_info=True)
         except Exception as _exc:# pylint: disable=[broad-except]
-            logging.debug(
+            logger.debug(
                 "Error retrieving the JWKs for the client.", exc_info=True)
-        return KeySet([])
+        return __pk__("Return empty KeySet after failure =====>",
+                      KeySet([]))
 
 
     def check_endpoint_auth_method(self, method: str, endpoint: str) -> bool:
-- 
cgit v1.2.3