A.1.1 Login
M-CNCC IAM UI- User login
Figure -1 User login
M-CNCC IAM Kc
Logs:
{"timestamp":"2025-11-27T14:30:53.648808926Z","sequence":2347,"loggerClassName":"org.jboss.logging.Logger","loggerName":"org.keycloak.events","level":"DEBUG","message":"type=\"LOGIN\", realmId=\"master\", realmName=\"master\", clientId=\"security-admin-console\", userId=\"acc21615-964a-4055-8c20-fb2705bd641b\", sessionId=\"20f8b56d-323c-c7ca-baa6-fe9c837653f3\", ipAddress=\"10.75.213.184\", auth_method=\"openid-connect\", auth_type=\"code\", response_type=\"code\", redirect_uri=\"http://10.75.213.184:30085/cncc/auth/admin/master/console/\", consent=\"no_consent_required\", code_id=\"20f8b56d-323c-c7ca-baa6-fe9c837653f3\", username=\"admin\", response_mode=\"query\", authSessionParentId=\"20f8b56d-323c-c7ca-baa6-fe9c837653f3\", authSessionTabId=\"gcJ7MlPOGec\"","threadName":"executor-thread-4","threadId":46,"mdc":{},"ndc":"","hostName":"cncc-iam","processName":"/opt/java/jre/bin/java","processId":571}M-CNCC IAM Ingress Gateway Logs:
SECURITY- Request log:
{
"instant": {
"epochSecond": 1764253852,
"nanoOfSecond": 597336446
},
"thread": "igw-app-thread5",
"level": "INFO",
"loggerName": "ocpm.cne.gateway.cncc.filters.CnccLoggingFilter",
"message": {
"logType": "SECURITY",
"type": "REQUEST",
"operationType": "POST",
"userId": "1",
"username": "admin",
"remoteAddress": "xxx.xxx.xxx.xxx:36166",
"localAddress": "xxx.xxx.xxx.xxx:8081",
"resourcePath": "/cncc/auth/realms/master/login-actions/authenticate",
"scheme": "http",
"queryParams": {
"session_code": "vQNfAgKZ2fj086nBGeFhZUZyWxfTde0PuCN2jbHFRyM",
"execution": "75965990-07d5-4dc3-b9aa-e7ad197e41f5",
"client_id": "security-admin-console",
"tab_id": "gcJ7MlPOGec",
"client_data": "eyJydSI6Imh0dHA6Ly94eHgueHh4Lnh4eDozMDA4NS9jb mNjYy9hdXRoL2FkbWluL21hc3Rlci9jb25zb2xlLyIsInJ0IjoiY29kZSIsInJtIjoicXVlcnkiLCJzdCI6ImIxMmQwZjg1LWRlZTEtNGIzOS1iMDZhLWEzNzAwODY0YTVlMSJ9"
},
"headers": {
"Origin": "null",
"Cookie": "{masked}",
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"Connection": "keep-alive",
"User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36",
"uuidToken": "7a413d70-288f-4b45-bfb0-767af8305a55",
"Host": "xxx.xxx.xxx.xxx:30085",
"Accept-Encoding": "gzip, deflate",
"svcName": "cncc-iam-kc-http.cncc.svc.cluster.local",
"ocLogId": "1764253852589_96_cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"sbi-timer-publish-headers": "false",
"Cache-Control": "max-age=0",
"Upgrade-Insecure-Requests": "1",
"Accept-Language": "en-US,en;q=0.9",
"Content-Length": "46",
"sbi-timer-feature": "false",
"Content-Type": "application/x-www-form-urlencoded"
},
"payload": "username=admin&password={masked}&credentialId=",
"authenticationType": "UNKNOWN"
},
"endOfBatch": false,
"loggerFqcn": "org.apache.logging.log4j.internal.DefaultLogBuilder",
"threadId": 110,
"threadPriority": 5,
"messageTimestamp": "2025-11-27T14:30:52.597+0000",
"processId": "1",
"ingressTxId": "ingress-tx-1868198058",
"pod": "cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"ocLogId": "1764253852589_96_cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"instanceType": "prod",
"xRequestId": "-"
}SECURITY- Response
log:
{
"instant": {
"epochSecond": 1764253853,
"nanoOfSecond": 770839104
},
"thread": "igw-app-thread6",
"level": "INFO",
"loggerName": "ocpm.cne.gateway.cncc.filters.CnccLoggingFilter",
"message": {
"logType": "SECURITY",
"type": "RESPONSE",
"operationType": "POST",
"userId": "1",
"username": "admin",
"resourcePath": "/cncc/auth/realms/master/login-actions/authenticate",
"scheme": "http",
"headers": {
"content-length": "0",
"transfer-encoding": "chunked",
"X-Content-Type-Options": "nosniff",
"RequestMethod": "POST",
"Referrer-Policy": "no-referrer",
"X-Frame-Options": "SAMEORIGIN",
"Strict-Transport-Security": "max-age=31536000; includeSubDomains",
"X-Robots-Tag": "none",
"Cache-Control": "no-store, must-revalidate, max-age=0",
"Content-Security-Policy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
"NettyLatency": "1764253852589",
"Set-Cookie": "{masked}",
"Location": "http://xxx.xxx.xxx.xxx:30085/cncc/auth/admin/master/console/?state=b12d0f85-dee1-4b39-b06a-a3700864a5e1&session_state=20f8b56d-323c-c7ca-baa6-fe9c837653f3&iss=http%3A%2F%2Fxxx.xxx.xxx.xxx%3A30085%2Fcncc%2Fauth%2Frealms%2Fmaster&code=25a4191b-a508-703e-1976-eff31ac34a31.20f8b56d-323c-c7ca-baa6-fe9c837653f3.6d475927-19a8-4082-a9f4-8d6b68afbb1a"
},
"payload": {},
"authenticationType": "UNKNOWN",
"status": "302 FOUND"
},
"endOfBatch": false,
"loggerFqcn": "org.apache.logging.log4j.internal.DefaultLogBuilder",
"threadId": 113,
"threadPriority": 5,
"messageTimestamp": "2025-11-27T14:30:53.770+0000",
"processId": "1",
"ingressTxId": "ingress-tx-909711414",
"pod": "cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"ocLogId": "-",
"instanceType": "prod",
"xRequestId": "-"
}M-CNCC Core UI- User login
Figure -2 User login
M-CNCC IAM Kc
Logs:
{"timestamp":"2025-11-27T14:34:35.678090562Z","sequence":2369,"loggerClassName":"org.jboss.logging.Logger","loggerName":"org.keycloak.events","level":"DEBUG","message":"type=\"LOGIN\", realmId=\"cncc\", realmName=\"cncc\", clientId=\"cncc\", userId=\"c25f872d-6957-4cc5-957f-90c496d225b5\", sessionId=\"475b8a3d-ce98-789a-46bc-386c30e48c8b\", ipAddress=\"10.75.213.184\", auth_method=\"openid-connect\", auth_type=\"code\", response_type=\"code\", redirect_uri=\"http://10.75.213.184:30030/login/oauth2/code/cncc-iam\", consent=\"no_consent_required\", code_id=\"475b8a3d-ce98-789a-46bc-386c30e48c8b\", username=\"user\", response_mode=\"query\", authSessionParentId=\"475b8a3d-ce98-789a-46bc-386c30e48c8b\", authSessionTabId=\"vZID1lMFDIs\"","threadName":"executor-thread-12","threadId":57,"mdc":{},"ndc":"","hostName":"cncc-iam","processName":"/opt/java/jre/bin/java","processId":571}M-CNCC IAM Ingress Gateway logs:
SECURITY- Request
log:
{
"instant": {
"epochSecond": 1764254075,
"nanoOfSecond": 113001571
},
"thread": "igw-app-thread19",
"level": "INFO",
"loggerName": "ocpm.cne.gateway.cncc.filters.CnccLoggingFilter",
"message": {
"logType": "SECURITY",
"type": "REQUEST",
"operationType": "POST",
"userId": "UNKNOWN",
"username": "UNKNOWN",
"remoteAddress": "xxx.xxx.xxx.xxx:30482",
"localAddress": "xxx.xxx.xxx.xxx:8081",
"resourcePath": "/cncc/auth/realms/cncc/login-actions/authenticate",
"scheme": "http",
"queryParams": {
"session_code": "tgpUYk_zjaEiPSEL6w9KkFfODFz0LHJ50txwluQ_NdI",
"execution": "91a42aca-f4f5-401f-a63f-ebbed8681d17",
"client_id": "cncc",
"tab_id": "vZID1lMFDIs",
"client_data": "eyJydSI6Imh0dHA6Ly94eHgueHh4Lnh4eDozMDAzMC9sb2dpbi9vYXV0aDIvY29kZS9jb mNjLWlhbSIsInJ0IjoiY29kZSIsInN0IjoiX3E0YXdoaUZ1dGVhYTBJMVE5LTFuRURjT01JaDR1czdWMm5MaXBvcnhpZz0ifQ"
},
"headers": {
"Origin": "null",
"Cookie": "{masked}",
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"Connection": "keep-alive",
"User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36",
"uuidToken": "c9106100-3cfe-4fdc-9877-c0c401bfa354",
"Host": "xxx.xxx.xxx.xxx:30085",
"Accept-Encoding": "gzip, deflate",
"svcName": "cncc-iam-kc-http.cncc.svc.cluster.local",
"ocLogId": "1764254075109_70_cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"sbi-timer-publish-headers": "false",
"Cache-Control": "max-age=0",
"Upgrade-Insecure-Requests": "1",
"Accept-Language": "en-US,en;q=0.9",
"Content-Length": "47",
"sbi-timer-feature": "false",
"Content-Type": "application/x-www-form-urlencoded"
},
"payload": "username=user&password={masked}&credentialId=",
"authenticationType": "UNKNOWN"
},
"endOfBatch": false,
"loggerFqcn": "org.apache.logging.log4j.internal.DefaultLogBuilder",
"threadId": 135,
"threadPriority": 5,
"messageTimestamp": "2025-11-27T14:34:35.113+0000",
"processId": "1",
"ingressTxId": "ingress-tx-678976756",
"pod": "cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"ocLogId": "1764254075109_70_cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"instanceType": "prod",
"xRequestId": "-"
}SECURITY- Response
log:
{
"instant": {
"epochSecond": 1764254075,
"nanoOfSecond": 704319886
},
"thread": "igw-app-thread3",
"level": "INFO",
"loggerName": "ocpm.cne.gateway.cncc.filters.CnccLoggingFilter",
"message": {
"logType": "SECURITY",
"type": "RESPONSE",
"operationType": "POST",
"userId": "UNKNOWN",
"username": "UNKNOWN",
"resourcePath": "/cncc/auth/realms/cncc/login-actions/authenticate",
"scheme": "http",
"headers": {
"content-length": "0",
"transfer-encoding": "chunked",
"X-Content-Type-Options": "nosniff",
"RequestMethod": "POST",
"Referrer-Policy": "no-referrer",
"X-Frame-Options": "SAMEORIGIN",
"Strict-Transport-Security": "max-age=31536000; includeSubDomains",
"X-Robots-Tag": "none",
"Cache-Control": "no-store, must-revalidate, max-age=0",
"Content-Security-Policy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
"NettyLatency": "1764254075109",
"Set-Cookie": "{masked}",
"Location": "http://xxx.xxx.xxx.xxx:30030/login/oauth2/code/cncc-iam?state=_q4awhiFuteaa0I1Q9-1nEDcOMIh4us7V2nLiporxig%3D&session_state=475b8a3d-ce98-789a-46bc-386c30e48c8b&iss=http%3A%2F%2Fxxx.xxx.xxx.xxx%3A30085%2Fcncc%2Fauth%2Frealms%2Fcncc&code=3c5c714b-e16a-b7bd-6cd8-d0dcf60f3226.475b8a3d-ce98-789a-46bc-386c30e48c8b.9faaa454-bbaf-4af0-91dd-2d01aa82776d"
},
"payload": {},
"authenticationType": "UNKNOWN",
"status": "302 FOUND"
},
"endOfBatch": false,
"loggerFqcn": "org.apache.logging.log4j.internal.DefaultLogBuilder",
"threadId": 100,
"threadPriority": 5,
"messageTimestamp": "2025-11-27T14:34:35.704+0000",
"processId": "1",
"ingressTxId": "ingress-tx-968859374",
"pod": "cncc-iam-ingress-gateway-85d6d57584-wt9zk",
"ocLogId": "-",
"instanceType": "prod",
"xRequestId": "-"
} M-CNCC Core Ingress Gateway logs: Audit
Log
{
"instant": {
"epochSecond": 1763534758,
"nanoOfSecond": 261104272
},
"thread": "reactor-http-nio-2",
"level": "INFO",
"loggerName": "ocpm.cne.gateway.cncc.config.CustomAuthenticationSuccessHandler",
"message": {
"logType": "AUDIT",
"type": "LOGIN",
"resourceType": "CNCC",
"userId": "c25f872d-6957-4cc5-957f-90c496d225b5",
"username": "user",
"userRoles": [
"DD_WRITE",
"CNCC_WRITE",
"BSF_READ",
"UDR_READ",
"NSSF_READ",
"NSSF_WRITE",
"SEPP_WRITE",
"PROVGW_READ",
"CS_WRITE",
"SCP_READ",
"default-roles-cncc",
"offline_access",
"ADMIN",
"SEPP_READ",
"uma_authorization",
"POLICY_WRITE",
"NRF_READ",
"SCP_WRITE",
"OCCM_READ",
"DD_READ",
"POLICY_READ",
"OCCM_WRITE",
"CNCC_READ",
"BSF_WRITE",
"PROVGW_WRITE",
"UDR_WRITE",
"NRF_WRITE"
],
"operationType": "GET",
"remoteAddress": "xxx.xxx.xxx.xxx:46681",
Inappropriate output content detected in output blocklistParent topic: CNC Console UI Event Logs