Description

When Keycloak logs errors about refreshing tokens, the logged information misses some details:

• The error code is set, but the details (as submitted to the client) are missing, which could provide details on what is actually happening. So the caller has more information at hand than the admin looking at the logs.
• The logs miss the session ID. We have it in multiple other places (actually in every token that we hand out), but not in the logs. This would allow tracking all events that happen for this session.

Discussion

https://github.com/keycloak/keycloak/issues/14040#issuecomment-2034148155

Motivation

Provide means to analyze REFRESH_TOKEN_ERROR causes by looking at the logs.

Details

I'll provide a PR