2 files changed, 8 insertions, 1 deletions
diff --git a/security-utils/src/main/java/com/yahoo/security/token/Token.java b/security-utils/src/main/java/com/yahoo/security/token/Token.java
index bc1d7239310..af50ad9a733 100644
--- a/security-utils/src/main/java/com/yahoo/security/token/Token.java
+++ b/security-utils/src/main/java/com/yahoo/security/token/Token.java
@@ -67,7 +67,8 @@ public class Token {
     @Override
     public String toString() {
         // Avoid leaking raw token secret as part of toString() output
-        return "Token(fingerprint: %s)".formatted(fingerprint);
+        // Fingerprint first, since that's the most important bit.
+        return "Token(fingerprint: %s, domain: %s)".formatted(fingerprint, domain);
     }
 
     /**
diff --git a/security-utils/src/main/java/com/yahoo/security/token/TokenDomain.java b/security-utils/src/main/java/com/yahoo/security/token/TokenDomain.java
index b29815f3a56..e01d942cacf 100644
--- a/security-utils/src/main/java/com/yahoo/security/token/TokenDomain.java
+++ b/security-utils/src/main/java/com/yahoo/security/token/TokenDomain.java
@@ -3,6 +3,7 @@ package com.yahoo.security.token;
 
 import java.util.Arrays;
 
+import static com.yahoo.security.ArrayUtils.fromUtf8Bytes;
 import static com.yahoo.security.ArrayUtils.toUtf8Bytes;
 
 /**
@@ -43,6 +44,11 @@ public record TokenDomain(byte[] fingerprintContext, byte[] checkHashContext) {
         return result;
     }
 
+    @Override
+    public String toString() {
+        return "'%s'/'%s'".formatted(fromUtf8Bytes(fingerprintContext), fromUtf8Bytes(checkHashContext));
+    }
+
     public static TokenDomain of(String fingerprintContext, String checkHashContext) {
         return new TokenDomain(toUtf8Bytes(fingerprintContext),
                                toUtf8Bytes(checkHashContext));