admin/Dota-Zombie-Invasion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add logging to admin login route

Browse Source 
Log password attempt details, secure flag decision, and Set-Cookie header
to help debug login failures.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
achmad
2026-05-29 18:52:51 +07:00
parent 549fb20128
commit a46b3a7ca9
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/app/api/admin/login/route.ts
+6 -1
View File
@@ -3,12 +3,17 @@ import { NextRequest, NextResponse } from 'next/server';
export async function POST(request: NextRequest) {
const { password } = await request.json();
const ADMIN_PASSWORD = process.env.ADMIN_PASSWORD || 'admin';
console.log('[AdminLogin] attempt', { providedLength: password?.length, expectedLength: ADMIN_PASSWORD.length, match: password === ADMIN_PASSWORD });
if (password !== ADMIN_PASSWORD) {
console.log('[AdminLogin] failed: password mismatch');
return NextResponse.json({ success: false, error: 'Invalid password' }, { status: 401 });
}
const secure = request.nextUrl.protocol === 'https:' || request.headers.get('x-forwarded-proto') === 'https';
console.log('[AdminLogin] success, setting cookie', { secure, protocol: request.nextUrl.protocol, forwardedProto: request.headers.get('x-forwarded-proto') });
const response = NextResponse.json({ success: true });
response.cookies.set('admin_session', 'authenticated', {
httpOnly: true, secure: true, sameSite: 'lax', path: '/admin', maxAge: 86400,
httpOnly: true, secure, sameSite: 'lax', path: '/admin', maxAge: 86400,
});
console.log('[AdminLogin] response cookie header:', response.headers.get('set-cookie'));
return response;
}