From 52f5a0414e0a41746e829a4fb5f74aa47b19f71e Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Tue, 7 Apr 2026 10:34:15 +0200
Subject: [PATCH] debug: temporarily log access_token decode failures at WARN
 level

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .../com/cameleer3/server/app/security/OidcTokenExchanger.java   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/OidcTokenExchanger.java b/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/OidcTokenExchanger.java
index 34d2512c..87538772 100644
--- a/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/OidcTokenExchanger.java
+++ b/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/OidcTokenExchanger.java
@@ -131,7 +131,7 @@ public class OidcTokenExchanger {
                     log.info("OIDC access_token audience mismatch (expected='{}')", audience);
                 }
             } catch (Exception e) {
-                log.debug("Could not decode access_token as JWT: {}", e.getMessage());
+                log.warn("Could not decode access_token as JWT: {}", e.getMessage());
             }
         }
         if (roles.isEmpty()) {