Security/Services/AuthService.cs

@@ -226,26 +226,18 @@ public class AuthService(ICacheService cache, IAccessToken accessTokenService, I
             cookieOptions.DropCookie(context, CookieNames.AccessToken);
             cookieOptions.DropCookie(context, CookieNames.RefreshToken);
 
-            const string error = "Token validation failed for user ID {UserId}. Fingerprint: {Fingerprint}. ";
-            if (authToken.RefreshToken != requestContext.RefreshToken)
-                logger.LogWarning(
-                    error +
-                    "Cached refresh token {ExpectedRefreshToken} does not match the provided refresh token {RefreshToken}",
-                    authToken.UserId,
-                    authToken.Fingerprint,
-                    authToken.RefreshToken,
-                    requestContext.RefreshToken);
-            else
-                logger.LogWarning(
-                    error +
-                    "User-Agent {ExpectedUserAgent} and IP {ExpectedUserIp} in cache do not match the provided " +
-                    "User-Agent {ProvidedUserAgent} and IP {ProvidedIp}",
-                    authToken.UserId,
-                    authToken.Fingerprint,
-                    authToken.UserAgent,
-                    authToken.Ip,
-                    requestContext.UserAgent,
-                    requestContext.Ip);
+            logger.LogWarning("Token validation failed for user ID {UserId}. Fingerprint: {Fingerprint}. " +
+                              "RefreshToken: {ExpectedRefreshToken} -> {RefreshToken}, " +
+                              "UserAgent: {ExpectedUserAgent} -> {ProvidedUserAgent}, " +
+                              "Ip: {ExpectedUserIp} -> {ProvidedIp}",
+                authToken.UserId,
+                authToken.Fingerprint,
+                authToken.RefreshToken,
+                requestContext.RefreshToken,
+                authToken.UserAgent,
+                requestContext.UserAgent,
+                authToken.Ip,
+                requestContext.Ip);
 
             throw new SecurityException(defaultMessageError);
         }