From d54a72ca2c6988dd3f19c5fde2ac864bdfc3d943 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Thu, 11 Jun 2026 14:04:36 +0400
Subject: [PATCH] debug: add resolveUser logging for canAdminMode diagnosis

---
 package.json |  2 +-
 ui/index.js  | 12 ++++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 1759b31..0687360 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ipwhitelist",
-  "version": "0.5.42",
+  "version": "0.5.43",
   "description": "IP WhiteList microservice for cloud provider",
   "main": "server.js",
   "scripts": {
diff --git a/ui/index.js b/ui/index.js
index 0f665ab..1929392 100644
--- a/ui/index.js
+++ b/ui/index.js
@@ -67,6 +67,18 @@ function createUiRouter({ auth, MOCK_USERS, authLimiter }) {
       // ВРЕМЕННО: ntazetdinov@nubes.ru без isAdmin тоже видит toggle (для тестов)
       const canAdminMode = !!(iamAdmin && activeClientId === ADMIN_CLIENT_ID)
         || (email === 'ntazetdinov@nubes.ru' && activeClientId === ADMIN_CLIENT_ID); // ← убрать после тестов
+      console.log('[resolveUser]', JSON.stringify({
+        sessionEmail,
+        payloadEmail: payload.email,
+        payloadLogin: payload.login,
+        email,
+        activeClientId,
+        rawClientId,
+        allClientIds,
+        iamAdmin,
+        canAdminMode,
+        sessionUser: req.session && req.session.user ? { email: req.session.user.email, clientId: req.session.user.clientId } : null
+      }, null, 2));
       req.user = {
         clientId:       rawClientId,
         allClientIds,