limit the size of the logged response to 2048 bytes in error cases

Fixes coreos#306
drakkan · Apr 25, 2023 · 3003d48 · 3003d48
1 parent 82f6983
commit 3003d48
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/oidc/oidc.go b/oidc/oidc.go
@@ -216,7 +216,11 @@ func NewProvider(ctx context.Context, issuer string) (*Provider, error) {
 	}
 
 	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("%s: %s", resp.Status, body)
+		maxBodySize := len(body)
+		if maxBodySize > 2048 {
+			maxBodySize = 2048
+		}
+		return nil, fmt.Errorf("%s: %s", resp.Status, body[:maxBodySize])
 	}
 
 	var p providerJSON