u

src/api/routes/auth/login.js

@@ -45,6 +45,7 @@ export function register(app, basePath = '') {
 
             const allowed = db.getAllowedEmail(email);
             if (!allowed) {
+                console.warn(`Login rejected: email not authorized (${email})`);
                 return res.status(403).json({ error: 'Email is not authorized' });
             }