Ben Thorner 96c527038c Only log authorization for public requests ...

This is the original behaviour [1]. Since all internal requests will
have corresponding logs from public-facing apps that are making them,
there's little value in logging them.

Logging internal requests doesn't lead to a significant increase in
our overall log ingestion: a rough estimate is its an extra 5000 logs
per minute, out of about 900K per minute.

[1]: e08d726f05/app/authentication/auth.py (L153)

2021-08-04 16:16:31 +01:00

..

__init__.py

…

auth.py

Only log authorization for public requests

2021-08-04 16:16:31 +01:00