From 923e97a7e54847ffe8e72cbcbbc27aa124af89b8 Mon Sep 17 00:00:00 2001
From: Viren070 <viren070@protonmail.com>
Date: Thu, 31 Jul 2025 16:11:31 +0100
Subject: [PATCH] Update middleware.py

---
 api/middleware.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/api/middleware.py b/api/middleware.py
index f4938c1..ab30e0d 100644
--- a/api/middleware.py
+++ b/api/middleware.py
@@ -72,6 +72,7 @@ class UserDataMiddleware(BaseHTTPMiddleware):
             if encoded_user_data:
                 user_data = crypto_utils.decode_user_data(encoded_user_data)
                 secret_str = await crypto_utils.process_user_data(user_data)
+                logging.info(f'Using encoded_user_data header for UserData')
             else:
                 secret_str = request.path_params.get("secret_str") or request.query_params.get("secret_str")
                 user_data = await crypto_utils.decrypt_user_data(secret_str)
@@ -101,6 +102,7 @@ class UserDataMiddleware(BaseHTTPMiddleware):
         # validate api password if set
         if settings.is_public_instance is False:
             is_auth_required = getattr(endpoint, "auth_required", False)
+            logging.info(f'Comparing user password ({user_data.api_password}) against actual password ({settings.api_password})')
             if is_auth_required and user_data.api_password != settings.api_password:
                 # check if the endpoint is for /streams
                 if endpoint and endpoint.__name__ == "get_streams":