From 35937933b34fb0e1e2578f03bb8013d4b7b71a90 Mon Sep 17 00:00:00 2001
From: sax3l <simon@siax.io>
Date: Mon, 2 Nov 2026 15:58:52 +0100
Subject: [PATCH] chore(auth): log the OIDC failure code (no tokens or claims)

---
 app/api/auth/callback/route.ts | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/app/api/auth/callback/route.ts b/app/api/auth/callback/route.ts
index c784ca2..ddcaec3 100644
--- a/app/api/auth/callback/route.ts
+++ b/app/api/auth/callback/route.ts
@@ -68,7 +68,12 @@ export async function GET(request: NextRequest) {
     });
     response.cookies.set(OIDC_STATE_COOKIE, '', { path: '/', maxAge: 0 });
     return response;
-  } catch {
+  } catch (error: unknown) {
+    // Codes only (e.g. token_exchange_failed), never tokens or claims.
+    console.error(
+      '[0pt-auth] oidc callback failed:',
+      error instanceof Error ? error.message : 'unknown_error',
+    );
     return fail('verification_failed');
   }
 }
-- 
2.54.0