From 9562b9239d7aeabb0c9750472ede131cd3555290 Mon Sep 17 00:00:00 2001
From: jay brown <jay.a.brown@gmail.com>
Date: Fri, 18 Apr 2025 11:11:58 -0700
Subject: [PATCH] pr comments

---
 internal/cognitoauth/handler.go | 13 +++++--------
 1 file changed, 5 insertions(+), 8 deletions(-)

diff --git a/internal/cognitoauth/handler.go b/internal/cognitoauth/handler.go
index 0d7d1c3c..2cba70a1 100644
--- a/internal/cognitoauth/handler.go
+++ b/internal/cognitoauth/handler.go
@@ -178,18 +178,15 @@ func handleOAuthCallback(c echo.Context, config auth.ConfigProvider) error {
 		userGroups = []string{} // Initialize as empty array
 	}
 
-	// Debug logging for tokens
-	if os.Getenv("DEBUG") == "true" {
-		// Log decoded token for debugging
-		config.GetAuthLogger().Info("ID Token Claims", "claims", idTokenClaims)
-		config.GetAuthLogger().Info("Raw ID Token", "token", tokens.IDToken)
-		config.GetAuthLogger().Info("Raw Access Token", "token", tokens.AccessToken)
-	}
+	// Log decoded token for debugging
+	config.GetAuthLogger().Debug("ID Token Claims", "claims", idTokenClaims)
+	config.GetAuthLogger().Debug("Raw ID Token", "token", tokens.IDToken)
+	config.GetAuthLogger().Debug("Raw Access Token", "token", tokens.AccessToken)
 
 	// Check authorization
 	authorized, requiredGroups := checkPermissions(config.GetAuthCallbackPath(), userGroups, config.GetAuthRoutePermissions(), config.GetAuthLogger())
 	if !authorized {
-		config.GetAuthLogger().Warn("OAuth callback - access denied",
+		config.GetAuthLogger().Debug("OAuth callback - access denied",
 			"user", idTokenClaims["cognito:username"],
 			"groups", userGroups,
 			"required", requiredGroups)