From d3389159b602a9652b1fbef29b9fa1290abb3e41 Mon Sep 17 00:00:00 2001
From: akastijn <akastijn@alttd.com>
Date: Sun, 2 Aug 2026 17:30:28 +0200
Subject: [PATCH] Improve `subscribe` endpoint in `CommandsToServerController`:
 add error logging for missing or invalid tokens

---
 .../controllers/event/CommandsToServerController.java         | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/src/main/java/com/alttd/altitudeweb/controllers/event/CommandsToServerController.java b/backend/src/main/java/com/alttd/altitudeweb/controllers/event/CommandsToServerController.java
index b8e4995..7e6649b 100644
--- a/backend/src/main/java/com/alttd/altitudeweb/controllers/event/CommandsToServerController.java
+++ b/backend/src/main/java/com/alttd/altitudeweb/controllers/event/CommandsToServerController.java
@@ -24,17 +24,19 @@ public class CommandsToServerController {
     private String validToken;
 
     @GetMapping(path = "/subscribe/{server}", produces = MediaType.TEXT_EVENT_STREAM_VALUE)
-    public SseEmitter subscribe(@RequestHeader(value = "X-Altitude-Token") String token,
+    public SseEmitter subscribe(@RequestHeader(value = "X-Altitude-Token", required = false) String token,
                                 HttpServletResponse response, @PathVariable String server) {
         if (validToken == null || validToken.equals("invalid-token")) {
             log.error("Invalid token in config");
             throw new ResponseStatusException(HttpStatus.FORBIDDEN);
         }
         if (token == null) {
+            log.error("No token provided when trying to subscribe to {}", server);
             throw new ResponseStatusException(HttpStatus.UNAUTHORIZED);
         }
 
         if (!token.equals(validToken)) {
+            log.error("Invalid token provided when trying to subscribe to {}", server);
             throw new ResponseStatusException(HttpStatus.FORBIDDEN);
         }