Disable log in custom AuthenticationHandler

Is there an existing issue for this?

• I have searched the existing issues

Is your feature request related to a problem? Please describe the problem.

No response

Describe the solution you’d like

I can’t disable log by using "Logging": { "LogLevel": { "Microsoft.AspNetCore.Authentication": "Warning" } } in appsettings.json, but if I set logging level for a custom AuthenticationHandler. It will disable all other logs that I provided. I just want to disable the logs from “Microsoft.AspNetCore.Authentication”, the parent class.

Using “Microsoft.AspNetCore.Authentication”: “Warning” to change log level only for the parent class.

Additional context

No response

[Marusyk]

You’d need to give your logger in the derived class a different category name so you can configure it independently from the base class.

@Tratcher Could you please explain how it will work because the logs from the Base and Derived will have the same logger category name? Look at the code:

public class MyAuthenticationHandler : AuthenticationHandler<AuthenticationSchemeOptions>
{
	private readonly ILogger<MyAuthenticationHandler> _logger;

	public MyAuthenticationHandler(
		IOptionsMonitor<AuthenticationSchemeOptions> options,
		ILoggerFactory logger,
		UrlEncoder encoder,
		ISystemClock clock)
		: base(options, logger, encoder, clock)
	{
		_logger = logger.CreateLogger<MyAuthenticationHandler>();
	}
	
	protected override Task<AuthenticateResult> HandleAuthenticateAsync()
	{
		_logger.LogWarning("MyAuthenticationHandler");	
		return Task.FromResult(AuthenticateResult.Success(GetAuthenticationTicket()));
	}
}

The logs:

MyAuthenticationHandler <-- logger category == MyAuthenticationHandler AuthenticationScheme: MyAuthenticationScheme was challenged. <-- logger category == MyAuthenticationHandler

We need to know how to disable logs from the AuthenticationHandler class (AuthenticationScheme: MyAuthenticationScheme was challenged.).

Should we then create something like this in MyAuthenticationHandler :

_logger = logger.CreateLogger("DummyMyAuthenticationHandler");

The logs:

MyAuthenticationHandler <-- logger category == DummyMyAuthenticationHandler AuthenticationScheme: MyAuthenticationScheme was challenged. <-- logger category == MyAuthenticationHandler

then filter all logs for DummyMyAuthenticationHandler to hide “AuthenticationScheme: MyAuthenticationScheme was challenged.”?

{
  "Logging": {
    "LogLevel": {
      "MyAuthenticationHandler": "Critical" 
  }
  ...
}

after this the logs:

MyAuthenticationHandler <-- logger category == DummyMyAuthenticationHandler

It looks strange!

It would be better to change this https://github.com/dotnet/aspnetcore/blob/34f71bb22ce65e59c9b9bfbe3e183db395ef5595/src/Security/Authentication/Core/src/AuthenticationHandler.cs#L112 to Logger = logger.CreateLogger<AuthenticationHandler>();

Then the log will be:

MyAuthenticationHandler <-- logger category == MyAuthenticationHandler AuthenticationScheme: MyAuthenticationScheme was challenged. <-- logger category == AuthenticationHandler

So, just add

{
  "Logging": {
    "LogLevel": {
      "Microsoft.AspNetCore.Authentication": "Warning" 
  }
  ...
}

after this the logs will be expected:

MyAuthenticationHandler <-- logger category == MyAuthenticationHandler

[Tratcher]

You’d need to give your logger in the derived class a different category name so you can configure it independently from the base class.