Log OIDC JWT claims to aid SSC debugging of org allowlist

Author: MichaelGHSeg

.github/actions/artifactory-oidc/action.yml

@@ -44,6 +44,13 @@ runs:
           echo "::error::Failed to obtain GitHub OIDC token"; exit 1
         fi
 
+        decode_seg() { local s="${1}"; local m=$(( ${#s} % 4 )); [ $m -ne 0 ] && s="${s}$(printf '=%.0s' $(seq 1 $((4-m))))"; echo "$s" | tr '_-' '/+' | base64 -d 2>/dev/null; }
+        PAYLOAD=$(decode_seg "$(echo "$OIDC_JWT" | cut -d. -f2)")
+        echo "OIDC token claims:"
+        echo "  sub = $(echo "$PAYLOAD" | jq -r '.sub')"
+        echo "  aud = $(echo "$PAYLOAD" | jq -r '.aud')"
+        echo "  iss = $(echo "$PAYLOAD" | jq -r '.iss')"
+
         RESP=$(curl -sS "${ARTIFACTORY_URL}/access/api/v1/oidc/token" \
           -H 'Content-Type: application/json' \
           -d "{\"grant_type\":\"urn:ietf:params:oauth:grant-type:token-exchange\",