Skip to content

Add structured log for auth token validation failure on protected routes #378

@Chucks1093

Description

@Chucks1093

Summary
When an auth token fails validation on a protected route, the 401 response is returned to the client but no structured log is emitted. A warn-level log at the validation failure point helps distinguish expired tokens from malformed ones without exposing the token value.

Scope

  • identify where auth token validation occurs for protected routes
  • add a warn-level structured log on validation failure
  • include the failure reason, route path, and request ID but not the token value

Acceptance Criteria

  • a token validation failure emits a warn-level log with reason, route, and request ID
  • the token value is not present in the log
  • the client 401 response is unchanged

Contributor coordination: if you pick this up, reach out in Telegram for updates or clarification: https://t.me/accesslayerorg

Metadata

Metadata

Assignees

Labels

Stellar WaveIssues in the Stellar wave program

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions