Merge pull request #19966 from kysrpex/oidc_tokens_logs

[23.1] Do not print OIDC access tokens to the logs

Author: mvdbeek

lib/galaxy/authnz/custos_authnz.py

@@ -80,7 +80,6 @@ def refresh(self, trans, custos_authnz_token):
         # do not refresh tokens if they didn't reach their half lifetime
         if int(id_token_decoded["iat"]) + int(id_token_decoded["exp"]) > 2 * int(time.time()):
             return False
-        log.info(custos_authnz_token.access_token)
         oauth2_session = self._create_oauth2_session()
         token_endpoint = self.config["token_endpoint"]
         if self.config.get("iam_client_secret"):