Mask username in SCIMUserOperationListener

wso2-extensions · May 8, 2024 · 3fb8db7 · 3fb8db7
1 parent 309d806
commit 3fb8db7
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/...c/main/java/org/wso2/carbon/identity/scim2/common/listener/SCIMUserOperationListener.java b/...c/main/java/org/wso2/carbon/identity/scim2/common/listener/SCIMUserOperationListener.java
@@ -75,6 +75,7 @@
 import static org.wso2.carbon.identity.scim2.common.utils.SCIMCommonConstants.REQUIRED;
 import static org.wso2.carbon.identity.scim2.common.utils.SCIMCommonConstants.ErrorMessages.ERROR_CODE_LENGTH_VIOLATION;
 import static org.wso2.carbon.identity.scim2.common.utils.SCIMCommonConstants.ErrorMessages.ERROR_CODE_REGEX_VIOLATION;
+import static org.wso2.carbon.identity.scim2.common.utils.SCIMCommonUtils.maskIfRequired;
 
 /**
  * This is to perform SCIM related operation on User Operations.
@@ -434,7 +435,8 @@ private void validateClaimUpdate(String username) throws UserStoreException {
         try {
             isExistingJITProvisionedUser = UserSessionStore.getInstance().isExistingUser(username);
         } catch (UserSessionException e) {
-            throw new UserStoreException("Error while checking the federated user existence for the user: " + username);
+            throw new UserStoreException("Error while checking the federated user existence for the user: " +
+                    maskIfRequired(username));
         }
 
         // If federated user is already provisioned, block that user's synced attribute editing.