Add debug logging when hmac-secret output decryption fails

mozilla · Jul 10, 2024 · a02ed2b · a02ed2b
1 parent b833a60
commit a02ed2b
Showing 1 changed file with 14 additions and 2 deletions.
diff --git a/src/ctap2/commands/get_assertion.rs b/src/ctap2/commands/get_assertion.rs
@@ -376,7 +376,13 @@ impl GetAssertion {
                     {
                         dev.get_shared_secret()
                             .and_then(|shared_secret| hmac_response.decrypt_secrets(shared_secret))
-                            .and_then(Result::ok)
+                            .and_then(|result| match result {
+                                Ok(ok) => Some(ok),
+                                Err(err) => {
+                                    debug!("Failed to decrypt hmac-secret response: {:?}", err);
+                                    None
+                                }
+                            })
                     } else {
                         None
                     };
@@ -398,7 +404,13 @@ impl GetAssertion {
                     {
                         dev.get_shared_secret()
                             .and_then(|shared_secret| hmac_response.decrypt_secrets(shared_secret))
-                            .and_then(Result::ok)
+                            .and_then(|result| match result {
+                                Ok(ok) => Some(ok),
+                                Err(err) => {
+                                    debug!("Failed to decrypt hmac-secret response: {:?}", err);
+                                    None
+                                }
+                            })
                             .map(|outputs| outputs.into())
                     } else {
                         None