From 1256b0a5c6976198c4f1756255703837a0c84177 Mon Sep 17 00:00:00 2001
From: Mohamed-Hacene <mohamedhacene.b@gmail.com>
Date: Wed, 25 Mar 2026 10:13:40 +0100
Subject: [PATCH] chore(oidc): show extra_data in debug mode

---
 backend/iam/adapter.py | 34 +++++++++++++++++++++++-----------
 1 file changed, 23 insertions(+), 11 deletions(-)

diff --git a/backend/iam/adapter.py b/backend/iam/adapter.py
index 57da9fa654..4e124644a0 100644
--- a/backend/iam/adapter.py
+++ b/backend/iam/adapter.py
@@ -91,9 +91,7 @@ def pre_social_login(self, request, sociallogin):
         extra = sociallogin.account.extra_data
         logger.debug(
             "pre_social_login: extra_data received",
-            extra_data_keys=list(extra.keys()),
-            has_userinfo="userinfo" in extra,
-            has_id_token="id_token" in extra,
+            extra_data=extra,
             provider=sociallogin.account.provider,
         )
         # Primary lookup (legacy format)
@@ -135,23 +133,37 @@ def pre_social_login(self, request, sociallogin):
             return Response(
                 {"message": "Email not provided."}, status=HTTP_401_UNAUTHORIZED
             )
-        logger.info(
-            "pre_social_login: resolved email for user lookup",
-            email_domain=email_address.split("@")[-1]
-            if "@" in email_address
-            else "unknown",
+        logger.debug(
+            "pre_social_login: resolved email from IdP",
+            idp_email=email_address,
+            idp_email_repr=repr(email_address),
             provider=sociallogin.account.provider,
         )
         try:
             user = User.objects.get(email__iexact=email_address)
+            logger.debug(
+                "pre_social_login: user matched",
+                idp_email=email_address,
+                db_email=user.email,
+                user_id=str(user.id),
+                is_active=user.is_active,
+            )
             sociallogin.user = user
             sociallogin.connect(request, user)
+            logger.info(
+                "pre_social_login: social account connected",
+                provider=sociallogin.account.provider,
+                user_id=str(user.id),
+            )
         except User.DoesNotExist:
             logger.error(
                 "pre_social_login: user not found",
-                email_domain=email_address.split("@")[-1]
-                if "@" in email_address
-                else "unknown",
+                provider=sociallogin.account.provider,
+            )
+            logger.debug(
+                "pre_social_login: user not found - check DB for this email",
+                idp_email=email_address,
+                idp_email_repr=repr(email_address),
                 provider=sociallogin.account.provider,
             )
             return Response(