From 4d7bf98c82fc3f278ae32ae1a240db82d3644ee7 Mon Sep 17 00:00:00 2001
From: weisd <im@weisd.in>
Date: Wed, 3 Dec 2025 13:17:47 +0800
Subject: [PATCH] add logs (#962)

---
 crates/ecstore/src/set_disk.rs |  4 +---
 crates/iam/src/store/object.rs | 11 ++++++++---
 rustfs/src/auth.rs             |  6 +++++-
 3 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/crates/ecstore/src/set_disk.rs b/crates/ecstore/src/set_disk.rs
index 428afb40..bf3a9c35 100644
--- a/crates/ecstore/src/set_disk.rs
+++ b/crates/ecstore/src/set_disk.rs
@@ -3781,10 +3781,8 @@ impl ObjectIO for SetDisks {
             )
             .await
             {
-                error!("get_object_with_fileinfo err {:?}", e);
+                error!("get_object_with_fileinfo  {bucket}/{object} err {:?}", e);
             };
-
-            // error!("get_object_with_fileinfo end {}/{}", bucket, object);
         });
 
         Ok(reader)
diff --git a/crates/iam/src/store/object.rs b/crates/iam/src/store/object.rs
index 13221184..0390587c 100644
--- a/crates/iam/src/store/object.rs
+++ b/crates/iam/src/store/object.rs
@@ -38,7 +38,7 @@ use std::sync::LazyLock;
 use std::{collections::HashMap, sync::Arc};
 use tokio::sync::mpsc::{self, Sender};
 use tokio_util::sync::CancellationToken;
-use tracing::{debug, info, warn};
+use tracing::{info, warn};
 
 pub static IAM_CONFIG_PREFIX: LazyLock<String> = LazyLock::new(|| format!("{RUSTFS_CONFIG_PREFIX}/iam"));
 pub static IAM_CONFIG_USERS_PREFIX: LazyLock<String> = LazyLock::new(|| format!("{RUSTFS_CONFIG_PREFIX}/iam/users/"));
@@ -389,7 +389,7 @@ impl Store for ObjectStore {
         data = match Self::decrypt_data(&data) {
             Ok(v) => v,
             Err(err) => {
-                debug!("decrypt_data failed: {}", err);
+                warn!("delete the config file when decrypt failed failed: {}, path: {}", err, path.as_ref());
                 // delete the config file when decrypt failed
                 let _ = self.delete_iam_config(path.as_ref()).await;
                 return Err(Error::ConfigNotFound);
@@ -439,8 +439,10 @@ impl Store for ObjectStore {
             .await
             .map_err(|err| {
                 if is_err_config_not_found(&err) {
+                    warn!("load_user_identity failed: no such user, name: {name}, user_type: {user_type:?}");
                     Error::NoSuchUser(name.to_owned())
                 } else {
+                    warn!("load_user_identity failed: {err:?}, name: {name}, user_type: {user_type:?}");
                     err
                 }
             })?;
@@ -448,6 +450,9 @@ impl Store for ObjectStore {
         if u.credentials.is_expired() {
             let _ = self.delete_iam_config(get_user_identity_path(name, user_type)).await;
             let _ = self.delete_iam_config(get_mapped_policy_path(name, user_type, false)).await;
+            warn!(
+                "load_user_identity failed: user is expired, delete the user and mapped policy, name: {name}, user_type: {user_type:?}"
+            );
             return Err(Error::NoSuchUser(name.to_owned()));
         }
 
@@ -465,7 +470,7 @@ impl Store for ObjectStore {
                         let _ = self.delete_iam_config(get_user_identity_path(name, user_type)).await;
                         let _ = self.delete_iam_config(get_mapped_policy_path(name, user_type, false)).await;
                     }
-                    warn!("extract_jwt_claims failed: {}", err);
+                    warn!("extract_jwt_claims failed: {err:?}, name: {name}, user_type: {user_type:?}");
                     return Err(Error::NoSuchUser(name.to_owned()));
                 }
             }
diff --git a/rustfs/src/auth.rs b/rustfs/src/auth.rs
index 17dcd357..e53bf525 100644
--- a/rustfs/src/auth.rs
+++ b/rustfs/src/auth.rs
@@ -89,10 +89,14 @@ impl S3Auth for IAMAuth {
         if let Ok(iam_store) = rustfs_iam::get() {
             if let Some(id) = iam_store.get_user(access_key).await {
                 return Ok(SecretKey::from(id.credentials.secret_key.clone()));
+            } else {
+                tracing::warn!("get_user failed: no such user, access_key: {access_key}");
             }
+        } else {
+            tracing::warn!("get_secret_key failed: iam not initialized, access_key: {access_key}");
         }
 
-        Err(s3_error!(UnauthorizedAccess, "Your account is not signed up2"))
+        Err(s3_error!(UnauthorizedAccess, "Your account is not signed up2, access_key: {access_key}"))
     }
 }