Add improvements

shared/auth/decorators.py

@@ -343,7 +343,13 @@ def get_current_tenant_id(request: Request) -> Optional[str]:
 def extract_user_from_headers(request: Request) -> Optional[Dict[str, Any]]:
     """Extract user information from forwarded headers (gateway sets these)"""
     user_id = request.headers.get("x-user-id")
+    logger.info(f"🔍 Extracting user from headers",
+               user_id=user_id,
+               has_user_id=bool(user_id),
+               path=request.url.path)
+
     if not user_id:
+        logger.warning(f"❌ No x-user-id header found", path=request.url.path)
         return None
 
     user_context = {
@@ -359,6 +365,10 @@ def extract_user_from_headers(request: Request) -> Optional[Dict[str, Any]]:
         "demo_account_type": request.headers.get("x-demo-account-type", "")
     }
 
+    logger.info(f"✅ User context extracted from headers",
+               user_context=user_context,
+               path=request.url.path)
+
     # ✅ ADD THIS: Handle service tokens properly
     user_type = request.headers.get("x-user-type", "")
     service_name = request.headers.get("x-service-name", "")
@@ -448,17 +458,18 @@ def extract_user_from_jwt(auth_header: str) -> Optional[Dict[str, Any]]:
 async def get_current_user_dep(request: Request) -> Dict[str, Any]:
     """FastAPI dependency to get current user - ENHANCED with JWT fallback for services"""
     try:
-        # Log all incoming headers for debugging 401 issues
-        logger.debug(
-            "Authentication attempt",
+        # Enhanced logging for debugging
+        logger.info(
+            "🔐 Authentication attempt",
             path=request.url.path,
             method=request.method,
             has_auth_header=bool(request.headers.get("authorization")),
             has_x_user_id=bool(request.headers.get("x-user-id")),
-            has_x_user_type=bool(request.headers.get("x-user-type")),
-            has_x_service_name=bool(request.headers.get("x-service-name")),
-            x_user_type=request.headers.get("x-user-type", ""),
-            x_service_name=request.headers.get("x-service-name", ""),
+            has_x_is_demo=bool(request.headers.get("x-is-demo")),
+            has_x_demo_session_id=bool(request.headers.get("x-demo-session-id")),
+            x_user_id=request.headers.get("x-user-id", "MISSING"),
+            x_is_demo=request.headers.get("x-is-demo", "MISSING"),
+            x_demo_session_id=request.headers.get("x-demo-session-id", "MISSING"),
             client_ip=request.client.host if request.client else "unknown"
         )