Provide details for IdentityRetrievalFailed exception

CHANGES.rst

@@ -8,6 +8,7 @@ Version 0.6
 - Remove upper version pins of dependencies
 - Support friendly names for SAML assertions (set `'saml_friendly_names': True`
   in the auth provider settings)
+- Include more verbose authentication data in ``IdentityRetrievalFailed`` exception details
 
 Version 0.5.6
 -------------

flask_multipass/providers/authlib.py

@@ -174,5 +174,5 @@ def get_identity_from_auth(self, auth_info):
         identifier = auth_info.data.get(self.id_field)
         if not identifier:
             raise IdentityRetrievalFailed(f'Identifier ({self.id_field}) missing in authlib response',
-                                          provider=self)
+                                          details=auth_info.data, provider=self)
         return IdentityInfo(self, identifier=identifier, **auth_info.data)

flask_multipass/providers/saml.py

@@ -191,8 +191,10 @@ def get_identity_from_auth(self, auth_info):
         identifier = auth_info.data.get(self.id_field)
         if isinstance(identifier, list):
             if len(identifier) != 1:
-                raise IdentityRetrievalFailed('Identifier has multiple elements', provider=self)
+                raise IdentityRetrievalFailed('Identifier has multiple elements',
+                                              details=identifier, provider=self)
             identifier = identifier[0]
         if not identifier:
-            raise IdentityRetrievalFailed('Identifier missing in saml response', provider=self)
+            raise IdentityRetrievalFailed('Identifier missing in saml response',
+                                          details=auth_info.data, provider=self)
         return IdentityInfo(self, identifier=identifier, **auth_info.data)

flask_multipass/providers/shibboleth.py

@@ -86,5 +86,6 @@ def __init__(self, *args, **kwargs):
     def get_identity_from_auth(self, auth_info):
         identifier = auth_info.data.get(self.id_field)
         if not identifier:
-            raise IdentityRetrievalFailed('Identifier missing in shibboleth response', provider=self)
+            raise IdentityRetrievalFailed('Identifier missing in shibboleth response',
+                                          details=auth_info.data, provider=self)
         return IdentityInfo(self, identifier=identifier, **auth_info.data)