From e2b12e5683c33cd9f790bdfcecc9942c5f6b7fab Mon Sep 17 00:00:00 2001
From: Tauan BF <11513929+tauanbinato@users.noreply.github.com>
Date: Sun, 27 Sep 2026 11:16:16 -0300
Subject: [PATCH] Log SSO tokens of the authenticated user only with
 SSO_DEBUG_TOKENS

---
 src/sso.rs | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/sso.rs b/src/sso.rs
index 01fbd906..75824111 100644
--- a/src/sso.rs
+++ b/src/sso.rs
@@ -307,7 +307,11 @@ pub async fn exchange_code(
         user_name: user_name.clone(),
     };
 
-    debug!("Authenticated user {authenticated_user:?}");
+    if CONFIG.sso_debug_tokens() {
+        debug!("Authenticated user {authenticated_user:?}");
+    } else {
+        debug!("Authenticated user {identifier}");
+    }
     sso_auth.auth_response = Some(authenticated_user.clone());
     sso_auth.updated_at = Utc::now().naive_utc();
     sso_auth.save(conn).await?;