From 4ad145f00a9241bdf9d33d5daf7002e597d25e86 Mon Sep 17 00:00:00 2001
From: ZGaetano <zgaetano@wilddragon.net>
Date: Thu, 4 Jun 2026 05:20:13 +0000
Subject: [PATCH] debug(node-agent): log token prefix/suffix on auth reject

---
 services/node-agent/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/node-agent/index.js b/services/node-agent/index.js
index c4759bf..ee8f0ba 100644
--- a/services/node-agent/index.js
+++ b/services/node-agent/index.js
@@ -964,7 +964,7 @@ function checkAgentAuth(req) {
   const okNode = _bearerEq(token, NODE_TOKEN);
   const okShared = _bearerEq(token, CLUSTER_READ_TOKEN);
   if (!okNode && !okShared) {
-    console.warn(`[auth] reject: tok.len=${token.length} NODE_TOKEN.len=${NODE_TOKEN.length} CLUSTER_READ_TOKEN.len=${CLUSTER_READ_TOKEN.length}`);
+    console.warn(`[auth] reject: tok=${token.slice(0,6)}..${token.slice(-6)} CRT=${CLUSTER_READ_TOKEN.slice(0,6)}..${CLUSTER_READ_TOKEN.slice(-6)} match=${token===CLUSTER_READ_TOKEN}`);
   }
   return okNode || okShared;
 }