v1.0.19

src/routes/api/auth/oidc/callback/+server.ts

@@ -17,9 +17,15 @@ export const GET: RequestHandler = async (event) => {
 	const error = url.searchParams.get('error');
 	const errorDescription = url.searchParams.get('error_description');
 
+	// Extract client IP for logging
+	const clientIp = event.request.headers.get('x-forwarded-for')?.split(',')[0]?.trim()
+		|| event.request.headers.get('x-real-ip')
+		|| event.getClientAddress();
+
 	// Handle error from IdP
 	if (error) {
 		console.error('OIDC error from IdP:', error, errorDescription);
+		console.warn(`[Auth] OIDC login failed: ip=${clientIp} error=${errorDescription || error}`);
 		const errorMsg = encodeURIComponent(errorDescription || error);
 		throw redirect(302, `/login?error=${errorMsg}`);
 	}
@@ -33,12 +39,14 @@ export const GET: RequestHandler = async (event) => {
 		const result = await handleOidcCallback(code, state);
 
 		if (!result.success || !result.user) {
+			console.warn(`[Auth] OIDC login failed: ip=${clientIp} error=${result.error || 'Authentication failed'}`);
 			const errorMsg = encodeURIComponent(result.error || 'Authentication failed');
 			throw redirect(302, `/login?error=${errorMsg}`);
 		}
 
 		// Create session
-		await createUserSession(result.user.id, 'oidc', cookies);
+		await createUserSession(result.user.id, 'oidc', cookies, event.request);
+		console.log(`[Auth] OIDC login successful: user=${result.user.username} provider=${result.providerName || 'oidc'} ip=${clientIp}`);
 
 		// Audit log
 		await auditAuth(event, 'login', result.user.username, {