[FEATURE REQ] Make it easier to debug aad-starter

[chenrujun]

The following content is copied from email:

Do you know if there is any diagnostics capability in Spring Boot Azure AD or tracing I can turn on?

Before I got to a working solution I ran into some problem with getting this to work correctly

In the below controller I did not know the highlighted “SCOPE” part was required and I kept getting 
403 error with the following Authority: @PreAuthorize("hasAuthority('hello')")

It started working after I had the “SCOPE” in as followed

@RestController
public class HomeController {

    @GetMapping("webapiB")
    @ResponseBody
    @PreAuthorize("hasAuthority('SCOPE_hello')")
    public String webapiB() {
        return "Response from WebApiB.";
    }
}

It is quite challenging to debug web API issue returning 401 or 403 error.  
Is there any debugging or diagnostics I can turn on to get more info on why the error occurs?

My current plan:

1. Add more debug log about Authorities.
2. Update README.md about how to use these log to debug.

[stliu]

@chenrujun where is this "SCOPE" coming from? is it required?

[chenrujun]

@stliu Yes, it's required. You can get the email by searching Spring Boot Starter Active Directory - Diagnostics capability.

[stliu]

@chenrujun my question (as the email sender ) was why it is required, is there any doc about it?

[chenrujun]

@stliu

No docs. All information is come from that email.

The following content is copied from email:

It is quite challenging to debug web API issue returning 401 or 403 error.  
Is there any debugging or diagnostics I can turn on to get more info on why the error occurs?

So I created this issue.