Toutsu/GmRelayBot
1
1
Fork 0
Code Issues 18 Pull Requests 1 Actions Packages Projects Releases 85 Wiki Activity

fix: add Discord OAuth token exchange logging for production diagnostics #92

Closed
Toutsu wants to merge 0 commits from fix/discord-oauth-diagnostics into main
pull from: fix/discord-oauth-diagnostics
merge into: Toutsu:main
Conversation 0 Commits - Files Changed -
Toutsu commented 2026-05-25 12:47:57 +03:00
Owner
Copy Link
Copy Source

Summary

Добавлено логирование ошибок при обмене кода на токен в Discord OAuth, чтобы диагностировать почему в production происходит auth_failed.

Changes

  • DiscordAuthService.ExchangeCodeForTokenAsync теперь логирует StatusCode и тело ответа Discord API при неуспехе
  • Обновлены тесты DiscordAuthServiceTests для нового параметра ILogger
  • Версия поднята до 2.8.1

Test plan

  • dotnet build проходит
  • 265 тестов проходят

Workflow

  • CI passes
  • Code review approved
  • Deployed
  • Release published
## Summary Добавлено логирование ошибок при обмене кода на токен в Discord OAuth, чтобы диагностировать почему в production происходит `auth_failed`. ## Changes - `DiscordAuthService.ExchangeCodeForTokenAsync` теперь логирует `StatusCode` и тело ответа Discord API при неуспехе - Обновлены тесты `DiscordAuthServiceTests` для нового параметра `ILogger` - Версия поднята до `2.8.1` ## Test plan - [x] `dotnet build` проходит - [x] 265 тестов проходят ## Workflow - [ ] CI passes - [ ] Code review approved - [ ] Deployed - [ ] Release published
Toutsu added 1 commit 2026-05-25 12:47:58 +03:00
fix: add Discord OAuth token exchange logging for production diagnostics
PR Checks / test-and-build (pull_request) Failing after 6m20s
Details
7e02e86cd6 
- Log status code and response body when Discord /oauth2/token fails
- Helps identify why ExchangeCodeAsync returns null in production

Bump version → 2.8.1

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Toutsu added 1 commit 2026-05-25 13:09:12 +03:00
fix: Discord OAuth CSRF cookie SameSite=None for cross-site callback
PR Checks / test-and-build (pull_request) Successful in 6m34s
Details
72a392e652 
- Changed __DiscordOAuthState cookie from SameSite=Strict to SameSite=None
  because Discord redirects from discord.com (cross-site) and Strict
  prevents the cookie from being sent on the callback request.
- Added logging for CSRF validation failure to aid future diagnostics.

Bump version → 2.8.1

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Toutsu closed this pull request 2026-05-25 13:31:33 +03:00
Some checks are pending
PR Checks / test-and-build (pull_request) Successful in 6m34s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area:bot
Telegram bot and worker logic
 area:data
Database schema, migrations and persistence model
 area:discord
Discord bot service and Discord adapter
 area:infra
Infrastructure, runtime and deployment
 area:miniapp
Telegram Mini App dashboard
 area:platform
Platform-neutral abstractions and adapter boundaries
 area:shared
Shared domain and rendering contracts
 area:web
Blazor web dashboard
 in-progress
В работе (issue взят агентом)
 next-up
Recommended immediate backlog
 pending-approval
Ждёт согласования плана решения
 platform:discord
Discord-specific behavior or adapter work
 platform:multi
Cross-platform or platform-neutral work
 platform:telegram
Telegram-specific behavior or adapter work
 priority:p0
Critical priority
 priority:p0
Блокирующий приоритет: задача должна быть выполнена до признания решения production-ready
 priority:p1
High priority
 priority:p2
Medium priority
 priority:p3
Lower priority
 security
Security-sensitive work
 type:bug
Bug fix or corrective work
 type:chore
Maintenance and supporting work
 type:feature
New product functionality
 type:refactor
Structural change without direct feature growth
 type:test
Testing and coverage work
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Toutsu
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Toutsu/GmRelayBot#92
Delete Branch "fix/discord-oauth-diagnostics"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?