From 16ecf9e0d9208f0350708d4f7a462be3a7986a81 Mon Sep 17 00:00:00 2001
From: Praveen Sampath <praveensampath2508@gmail.com>
Date: Wed, 29 Jul 2026 08:23:46 +0000
Subject: [PATCH] fix(web): log OAuth credential database failures

---
 web/src/lib/server/oauth/userCredentials.ts | 28 +++++++++++++++++++--
 1 file changed, 26 insertions(+), 2 deletions(-)

diff --git a/web/src/lib/server/oauth/userCredentials.ts b/web/src/lib/server/oauth/userCredentials.ts
index a19f7955b..ba0fbd2ea 100644
--- a/web/src/lib/server/oauth/userCredentials.ts
+++ b/web/src/lib/server/oauth/userCredentials.ts
@@ -3,6 +3,7 @@ import { sql } from 'drizzle-orm'
 import { ulid } from 'ulid'
 import type { OAuthTokens, OAuthProfile } from './types'
 import { encrypt, decrypt, type EncryptedData } from '../crypto/encryption'
+import { logger } from '../logger'
 
 export interface UserOAuthCredential {
     id: string
@@ -69,7 +70,7 @@ export class UserOAuthCredentialsService {
         const accessTokenJson = JSON.stringify(encryptToken(tokens.access_token))
         const refreshTokenJson = JSON.stringify(encryptToken(tokens.refresh_token))
 
-        await db.execute(sql`
+        const insertQuery = sql`
             INSERT INTO user_oauth_credentials (
                 id, user_id, provider, provider_user_id,
                 access_token, refresh_token, token_type,
@@ -88,7 +89,30 @@ export class UserOAuthCredentialsService {
                 scopes = EXCLUDED.scopes,
                 profile_data = EXCLUDED.profile_data,
                 updated_at = NOW()
-        `)
+        `
+
+        try {
+            await db.execute(insertQuery)
+        } catch (error) {
+            const databaseError =
+                error instanceof Error && error.cause instanceof Error
+                    ? (error.cause as Error & {
+                          code?: string
+                          constraint_name?: string
+                          table_name?: string
+                          column_name?: string
+                      })
+                    : undefined
+
+            logger.error('Failed to save OAuth credentials', undefined, {
+                provider,
+                sqlState: databaseError?.code,
+                constraint: databaseError?.constraint_name,
+                table: databaseError?.table_name,
+                column: databaseError?.column_name,
+            })
+            throw error
+        }
 
         return this.getCredentials(userId, provider, profile.id)
     }