Does Spring Security Resource Server with JWT (Servlet stack) allow logging warnings / errors when invalid tokens are received. for example to aid with OWASP API10 (2019) “Insufficient Logging and Monitoring” — how to allow monitor for an increased number of rejected tokens, e.g. due to invalid signature?
I tried researching using documentation and some internet searches, but so far did not find information related to this. (Spring Security describes how to set DEBUG/TRACE setting, but I think that is not reasonable for an production environment.)
1