diff --git a/src/api/routes/auth/login.js b/src/api/routes/auth/login.js
index a05fc55..3f7709b 100644
--- a/src/api/routes/auth/login.js
+++ b/src/api/routes/auth/login.js
@@ -45,6 +45,7 @@ export function register(app, basePath = '') {
 
             const allowed = db.getAllowedEmail(email);
             if (!allowed) {
+                console.warn(`Login rejected: email not authorized (${email})`);
                 return res.status(403).json({ error: 'Email is not authorized' });
             }