A.1.3 Refresh Token

A refresh token issues a new access token to extend the user's session without requiring them to log in again.

M-CNCC IAM UI- Refresh Token Logs

M-CNCC IAM Kc Logs:

{"timestamp":"2025-11-27T15:01:17.642316786Z","sequence":2607,"loggerClassName":"org.jboss.logging.Logger","loggerName":"org.keycloak.events","level":"DEBUG","message":"type=\"REFRESH_TOKEN\", realmId=\"master\", realmName=\"master\", clientId=\"security-admin-console\", userId=\"acc21615-964a-4055-8c20-fb2705bd641b\", sessionId=\"8bf41957-1eee-e509-3bce-56bf385ec4d6\", ipAddress=\"10.75.213.184\", token_id=\"onrtrt:99622498-4ce5-2523-b2b8-7844f8ac4e8c\", grant_type=\"refresh_token\", refresh_token_type=\"Refresh\", access_token_expiration_time=\"60\", updated_refresh_token_id=\"afd1e0da-298c-45ad-ef45-27416a69692a\", scope=\"openid email profile\", age_of_refresh_token=\"67\", refresh_token_id=\"129ec718-1a9a-551f-b56b-dc205b5bee97\", refresh_token_sub=\"acc21615-964a-4055-8c20-fb2705bd641b\", client_auth_method=\"client-secret\"","threadName":"executor-thread-88","threadId":154,"mdc":{},"ndc":"","hostName":"cncc-iam","processName":"/opt/java/jre/bin/java","processId":571}

M-CNCC IAM Ingress Gateway Logs:

SECURITY- Request log:

{
  "instant": {
    "epochSecond": 1764255677,
    "nanoOfSecond": 627856372
  },
  "thread": "igw-app-thread14",
  "level": "INFO",
  "loggerName": "ocpm.cne.gateway.cncc.filters.CnccLoggingFilter",
  "message": {
    "logType": "SECURITY",
    "type": "REQUEST",
    "operationType": "POST",
    "userId": "1",
    "username": "admin",
    "remoteAddress": "xx.xx.xx.xx:xxxxx",
    "localAddress": "xx.xx.xx.xx:xxxx",
    "resourcePath": "/cncc/auth/realms/master/protocol/openid-connect/token",
    "scheme": "http",
    "queryParams": {},
    "headers": {
      "Origin": "http://xx.xx.xx.xx:xxxxx",
      "Cookie": "{masked}",
      "Accept": "*/*",
      "Connection": "keep-alive",
      "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36",
      "uuidToken": "03cf3cda-2e80-4f7c-b6c1-cdb56e2600a7",
      "Host": "xx.xx.xx.xx:xxxxx",
      "Accept-Encoding": "gzip, deflate",
      "svcName": "cncc-iam-kc-http.cncc.svc.cluster.local",
      "ocLogId": "1764255677625_70_cncc-iam-ingress-gateway-85d6d57584-wt9zk",
      "sbi-timer-publish-headers": "false",
      "Content-type": "application/x-www-form-urlencoded",
      "Accept-Language": "en-US,en;q=0.9",
      "Content-Length": "782",
      "sbi-timer-feature": "false"
    },
    "payload": "grant_type={masked}&refresh_token={masked}&client_id=security-admin-console",
    "authenticationType": "UNKNOWN"
  },
  "endOfBatch": false,
  "loggerFqcn": "org.apache.logging.log4j.internal.DefaultLogBuilder",
  "threadId": 130,
  "threadPriority": 5,
  "messageTimestamp": "2025-11-27T15:01:17.627+0000",
  "processId": "1",
  "ingressTxId": "ingress-tx-539009905",
  "pod": "cncc-iam-ingress-gateway-85d6d57584-wt9zk",
  "ocLogId": "1764255677625_70_cncc-iam-ingress-gateway-85d6d57584-wt9zk",
  "instanceType": "prod",
  "xRequestId": "-"
}

SECURITY- Response log:

{
  "instant": {
    "epochSecond": 1764255677,
    "nanoOfSecond": 663699378
  },
  "thread": "igw-app-thread19",
  "level": "INFO",
  "loggerName": "ocpm.cne.gateway.cncc.filters.CnccLoggingFilter",
  "message": {
    "logType": "SECURITY",
    "type": "RESPONSE",
    "operationType": "POST",
    "userId": "1",
    "username": "admin",
    "resourcePath": "/cncc/auth/realms/master/protocol/openid-connect/token",
    "scheme": "http",
    "headers": {
      "content-length": "4205",
      "Access-Control-Allow-Origin": "http://xx.xx.xx.xx:xxxxx",
      "X-Content-Type-Options": "nosniff",
      "RequestMethod": "POST",
      "Pragma": "no-cache",
      "Referrer-Policy": "no-referrer",
      "X-Frame-Options": "SAMEORIGIN",
      "Access-Control-Expose-Headers": "Access-Control-Allow-Methods",
      "Strict-Transport-Security": "max-age=31536000; includeSubDomains",
      "Cache-Control": "no-store",
      "Access-Control-Allow-Credentials": "true",
      "NettyLatency": "1764255677625",
      "Content-Type": "application/json"
    },
    "payload": {
      "access_token": "{masked}",
      "expires_in": 60,
      "refresh_expires_in": 1800,
      "refresh_token": "{masked}",
      "token_type": "Bearer",
      "id_token": "{masked}",
      "not-before-policy": 0,
      "session_state": "{masked}",
      "scope": "openid email profile"
    },
    "authenticationType": "UNKNOWN",
    "status": "200 OK"
  },
  "endOfBatch": false,
  "loggerFqcn": "org.apache.logging.log4j.internal.DefaultLogBuilder",
  "threadId": 135,
  "threadPriority": 5,
  "messageTimestamp": "2025-11-27T15:01:17.663+0000",
  "processId": "1",
  "ingressTxId": "ingress-tx-1218880694",
  "pod": "cncc-iam-ingress-gateway-85d6d57584-wt9zk",
  "ocLogId": "-",
  "instanceType": "prod",
  "xRequestId": "-"
}

Note:

Similar logs will be obtained for M-CNCC Core UI with realm set to cncc.