safety(api-gateway): remove debug token logging from JWT interceptor

Removed error!() call that logged the full JWT token on decode failure.
This was a security risk - tokens should never appear in logs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
jgrusewski
2026-02-22 06:27:10 +01:00
parent f46591dc9e
commit 9ed4fdd489

View File

@@ -369,11 +369,6 @@ impl JwtService {
let token_data =
decode::<JwtClaims>(token, &self.decoding_key, &self.validation).map_err(|e| {
error!("JWT decode failed in interceptor: {:?}", e);
error!("FULL TOKEN FOR DEBUGGING: {}", token);
error!(
"Token (first 50 chars): {}...",
&token[..50.min(token.len())]
);
let issuer_str = self
.validation
.iss