From 5baa1c2c69d27c14ea93eb42225a2dd38ca31768 Mon Sep 17 00:00:00 2001 From: Maurice Date: Mon, 12 Oct 2026 19:56:44 +0000 Subject: [PATCH] fix(oidc): a refused email link is logged through the app logger, so it reaches trek.log --- server/src/nest/oidc/oidc.service.ts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/server/src/nest/oidc/oidc.service.ts b/server/src/nest/oidc/oidc.service.ts index 594904aa3..f5000bc38 100644 --- a/server/src/nest/oidc/oidc.service.ts +++ b/server/src/nest/oidc/oidc.service.ts @@ -7,7 +7,7 @@ import type { InviteTokensRepository, InviteTokenRow } from '../../db/repositori import type { UsersRepository, UserRow } from '../../db/repositories/Users.repository'; import { User } from '../../types'; import { safeFetchAdminConfigured } from '../../utils/ssrfGuard'; -import { logError } from '../audit/audit-log.logger'; +import { logError, logWarn } from '../audit/audit-log.logger'; import { AuthService } from '../auth/auth.service'; import { readAppSetting, resolveAppSetting, type AppSettingKey } from '../common/app-settings.registry'; import { setAuthCookie, RememberOption } from '../common/cookie'; @@ -677,7 +677,7 @@ export class OidcService implements OnModuleDestroy { return { error: 'email_not_verified' }; } if (user.email_self_asserted) { - console.warn( + logWarn( `[OIDC] Refused to link a sign-in to user ${user.id} by email: the account set that address itself. An admin can confirm it by changing the email in the admin panel.`, ); return { error: 'email_link_blocked' }; @@ -685,7 +685,7 @@ export class OidcService implements OnModuleDestroy { // The same provider with another subject is another person at that // provider, never this account under a new name. if (user.oidc_sub && user.oidc_issuer === config.issuer) { - console.warn( + logWarn( `[OIDC] Refused to link a sign-in to user ${user.id} by email: it is linked to another subject of this provider.`, ); return { error: 'email_link_blocked' };