From d0910cd1b5ea27a5fe7c5cd58c40042383e662ba Mon Sep 17 00:00:00 2001 From: Jeremy-Z Date: Tue, 26 May 2026 11:17:33 -0400 Subject: [PATCH 1/5] Added additional logging for client auth signature validation failures. Also made sure to log this api call. --- src/layouts/entry-page/entry-page.vue | 18 ++++++++++++------ src/store/index.js | 6 +++++- 2 files changed, 17 insertions(+), 7 deletions(-) diff --git a/src/layouts/entry-page/entry-page.vue b/src/layouts/entry-page/entry-page.vue index 503827ac..7347e051 100644 --- a/src/layouts/entry-page/entry-page.vue +++ b/src/layouts/entry-page/entry-page.vue @@ -45,13 +45,7 @@ export default { showIssLoadingModal(false); return; } - - // Populate all the ISS Config values from the service call returns. - this.populateISSConfigValues(clientData); - // Session should only be created / validated on successful client tag validation to avoid unnecessary sessions for unauthorized users. - await analyticsMixin.methods.validateSession(); - try { // Check cookie const issCookie = getISSCookie(); @@ -119,6 +113,7 @@ export default { return { isAuthorized: false }; } + // Set the client tag on thes store here so we can use it for logging if need be. this.mainStore.issConfig.clientTag = clientTag; const resp = await validateISSClientTag(clientTag); @@ -126,6 +121,12 @@ export default { return { isAuthorized: false }; } + // Populate all the ISS Config values from the service call returns. + this.populateISSConfigValues(resp); + + // Session should only be created / validated on successful client tag validation to avoid unnecessary sessions for unauthorized users. + await analyticsMixin.methods.validateSession(); + let isAuthorized = false; let clientData = null; const decryptedParams = {}; @@ -143,6 +144,11 @@ export default { isAuthorized = vsigResp?.valid ?? false; this.mainStore.issConfig.isAuthenticated = isAuthorized; + + // Log the signature validation failure so we can monitor/alert on it. + if ( !isAuthorized ) { + global.$logger.logError(`[Entry Page] Client signature validation failed for Client Tag: ${clientTag} - Reason: ${vsigResp?.failureReason ?? ''} - Token: ${token} - Signature: ${signature}`); + } } else { isAuthorized = true; } diff --git a/src/store/index.js b/src/store/index.js index 6b6cd308..20bc7261 100644 --- a/src/store/index.js +++ b/src/store/index.js @@ -2942,6 +2942,8 @@ export const useMainStore = defineStore({ issConfig.billToAccountNumber = billToInfo.toString(); }, + // Do not log API call failure here since this is a validation call that can be spammy. + // Do not bailout because this is a fatal error here. async validateClientTag(clientTag) { return globalMethods.callHttpClient({ method: endpoints.ValidateClientTag.method, @@ -2958,11 +2960,13 @@ export const useMainStore = defineStore({ signature }; + // Log API call failure so we can monitor / alert on failed signature validations. + // Do not bailout because this is a fatal error here. return await globalMethods.callHttpClient({ method: endpoints.ValidateClientSignature.method, endpoint: endpoints.ValidateClientSignature.url, payload, - logApiCall: false, + logApiCall: true, bailoutOnError: false }); }, From c9a5a47e5347d7922e57be7cc3ba951abea4e474 Mon Sep 17 00:00:00 2001 From: Jeremy-Z Date: Tue, 26 May 2026 11:36:20 -0400 Subject: [PATCH 2/5] Updating imports to support the log error call. --- src/layouts/entry-page/entry-page.spec.js | 7 +++++++ src/layouts/entry-page/entry-page.vue | 1 + 2 files changed, 8 insertions(+) diff --git a/src/layouts/entry-page/entry-page.spec.js b/src/layouts/entry-page/entry-page.spec.js index ee238737..b5319974 100644 --- a/src/layouts/entry-page/entry-page.spec.js +++ b/src/layouts/entry-page/entry-page.spec.js @@ -10,6 +10,13 @@ import { useMainStore } from '@/store'; import settleAllPromises from '@/helpers/layout-helper.js'; import { fetchCmsContentForPage } from '@/helpers/cms-content-helper'; import * as clientAuthHelper from '@/helpers/clientauth-helper'; +import Logger from "@/helpers/logger"; +import crypto from 'crypto'; + +// Instantiate global logging object +global.$logger = new Logger(); + +global.crypto = crypto; // Mock our module for promises. jest.mock('@/helpers/layout-helper.js', () => jest.fn()); diff --git a/src/layouts/entry-page/entry-page.vue b/src/layouts/entry-page/entry-page.vue index 7347e051..c245907b 100644 --- a/src/layouts/entry-page/entry-page.vue +++ b/src/layouts/entry-page/entry-page.vue @@ -16,6 +16,7 @@ import showIssLoadingModal from '@/helpers/loading-modal-helper'; import applicationConfig from '@/constants/application-config'; import { toPossessive } from '@/helpers/text-helper'; import analyticsMixin from '@/mixins/analytics-mixin'; +import crypto from 'crypto'; export default { name: 'entry-page', From 0130fe4f3556610405f9ab16b9612062d48d8547 Mon Sep 17 00:00:00 2001 From: Jeremy-Z Date: Tue, 26 May 2026 12:15:48 -0400 Subject: [PATCH 3/5] VS Code did not save this file. --- src/layouts/entry-page/entry-page.vue | 1 - 1 file changed, 1 deletion(-) diff --git a/src/layouts/entry-page/entry-page.vue b/src/layouts/entry-page/entry-page.vue index c245907b..7347e051 100644 --- a/src/layouts/entry-page/entry-page.vue +++ b/src/layouts/entry-page/entry-page.vue @@ -16,7 +16,6 @@ import showIssLoadingModal from '@/helpers/loading-modal-helper'; import applicationConfig from '@/constants/application-config'; import { toPossessive } from '@/helpers/text-helper'; import analyticsMixin from '@/mixins/analytics-mixin'; -import crypto from 'crypto'; export default { name: 'entry-page', From 06371e0043d465f03eba24c53f26bead08f945fd Mon Sep 17 00:00:00 2001 From: Jeremy-Z Date: Tue, 26 May 2026 12:16:25 -0400 Subject: [PATCH 4/5] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- src/layouts/entry-page/entry-page.vue | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/layouts/entry-page/entry-page.vue b/src/layouts/entry-page/entry-page.vue index 7347e051..a87f81c8 100644 --- a/src/layouts/entry-page/entry-page.vue +++ b/src/layouts/entry-page/entry-page.vue @@ -113,7 +113,7 @@ export default { return { isAuthorized: false }; } - // Set the client tag on thes store here so we can use it for logging if need be. + // Set the client tag on the store here so we can use it for logging if need be. this.mainStore.issConfig.clientTag = clientTag; const resp = await validateISSClientTag(clientTag); From 06ff83716e37c02b64c6b753d6976d29ab448084 Mon Sep 17 00:00:00 2001 From: Jeremy-Z Date: Tue, 26 May 2026 12:17:42 -0400 Subject: [PATCH 5/5] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- src/layouts/entry-page/entry-page.spec.js | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/src/layouts/entry-page/entry-page.spec.js b/src/layouts/entry-page/entry-page.spec.js index b5319974..442e2067 100644 --- a/src/layouts/entry-page/entry-page.spec.js +++ b/src/layouts/entry-page/entry-page.spec.js @@ -10,11 +10,15 @@ import { useMainStore } from '@/store'; import settleAllPromises from '@/helpers/layout-helper.js'; import { fetchCmsContentForPage } from '@/helpers/cms-content-helper'; import * as clientAuthHelper from '@/helpers/clientauth-helper'; -import Logger from "@/helpers/logger"; import crypto from 'crypto'; -// Instantiate global logging object -global.$logger = new Logger(); +// Stub global logging object to avoid real network calls in tests +global.$logger = { + logError: jest.fn(), + logInfo: jest.fn(), + logWarn: jest.fn(), + logDebug: jest.fn() +}; global.crypto = crypto;