From d01df2a8107202e35997fec52909f075cda63405 Mon Sep 17 00:00:00 2001
From: sysops <sysops@LenovoT14Gen5>
Date: Thu, 2 Apr 2026 00:22:06 +0200
Subject: [PATCH] fix: Debug-Logging entfernt, tenant_domains auf 132
 wiederhergestellt

---
 internal/auth/auth.go | 15 +--------------
 1 file changed, 1 insertion(+), 14 deletions(-)

diff --git a/internal/auth/auth.go b/internal/auth/auth.go
index 9ff393d..4e8eaca 100644
--- a/internal/auth/auth.go
+++ b/internal/auth/auth.go
@@ -89,14 +89,8 @@ func (m *Manager) Login(username, password string) (token string, user *userstor
 		if domain := extractDomain(username); domain != "" {
 			ctx := context.Background()
 			tenantID, lookupErr := m.tenantLookup.GetTenantIDByDomain(ctx, domain)
-			if lookupErr != nil {
-				fmt.Printf("[DEBUG] tenant domain lookup failed for %q: %v\n", domain, lookupErr)
-			}
 			if lookupErr == nil && tenantID != nil {
 				tcfg, tErr := m.tenantLdapStore.GetWithPassword(ctx, *tenantID)
-				if tErr != nil {
-					fmt.Printf("[DEBUG] tenant LDAP GetWithPassword failed: %v\n", tErr)
-				}
 				if tErr == nil && tcfg != nil && tcfg.Enabled && tcfg.URL != "" && tcfg.BindPassword != "" {
 					attrs, authErr := ldapauth.Authenticate(ldapauth.Config{
 						URL:           tcfg.URL,
@@ -107,11 +101,7 @@ func (m *Manager) Login(username, password string) (token string, user *userstor
 						TLS:           tcfg.TLS,
 						TLSSkipVerify: tcfg.TLSSkipVerify,
 					}, username, password)
-						if authErr != nil {
-						fmt.Printf("[DEBUG] tenant LDAP auth failed for %q: %v\n", username, authErr)
-					}
-					if authErr == nil {
-						fmt.Printf("[DEBUG] tenant LDAP auth OK for %q, upserting...\n", username)
+						if authErr == nil {
 						role := tcfg.DefaultRole
 						if role == "" {
 							role = userstore.RoleUser
@@ -130,9 +120,6 @@ func (m *Manager) Login(username, password string) (token string, user *userstor
 							email = username
 						}
 						ldapUser, upsertErr := m.store.UpsertLDAPUser(username, email, role, tenantID)
-						if upsertErr != nil {
-							fmt.Printf("[DEBUG] UpsertLDAPUser failed for %q: %v\n", username, upsertErr)
-						}
 						if upsertErr == nil {
 							if ldapUser.TOTPEnabled {
 								t, e := m.issuePendingTOTPToken(ldapUser)