SEC-2152: OpenIDAuthenticationFilter errors are "lost" if logging > debug

[spring-projects-issues]

Daniel Serodio (Migrated from SEC-2152) said:

I'm using OpenIDAuthenticationFilter, and when I have an authentication error (in my case, most often caused by SSL problems), the error doesn't appear anywhere unless I set org.springframework.security.openid logging to DEBUG.

In the catch block at OpenIDAuthenticationFilter.java:132, this error should be logged as INFO, or at least, the re-thrown exception (AuthenticationServiceException) should wrap the caught exception.