add logging to sso

Author: ezekg

app/controllers/auth/sso_controller.rb

@@ -83,6 +83,8 @@ def callback
 
         # provision a new user for the current environment (not using existing users scope because it's a union)
         user = account.users.build(email: profile.email, environment:) do |new_user|
+          Keygen.logger.info { "[sso] creating new user: profile_id=#{profile.id.inspect} organization_id=#{profile.organization_id.inspect} account_id=#{account.id.inspect}" }
+
           new_user.sso_profile_id    = profile.id
           new_user.sso_connection_id = profile.connection_id
           new_user.sso_idp_id        = profile.idp_id
@@ -113,17 +115,21 @@ def callback
         role = name.underscore.to_sym # pattern matching expects a symbol
 
         unless user.role in Role(^role)
+          Keygen.logger.info { "[sso] changing user role: profile_id=#{profile.id.inspect} organization_id=#{profile.organization_id.inspect} account_id=#{account.id.inspect} user_id=#{user.id.inspect} user_role=#{role.inspect}" }
+
           user.change_role role
         end
       end
 
-      unless user.errors.empty?
+      unless user.valid?
         Keygen.logger.warn { "[sso] user is not valid: profile_id=#{profile.id.inspect} organization_id=#{profile.organization_id.inspect} account_id=#{account.id.inspect} user_id=#{user.id.inspect} error_messages=#{user.errors.messages.inspect}" }
 
         raise Keygen::Error::InvalidSingleSignOnError.new('user is not valid', code: 'SSO_USER_INVALID')
       end
 
       session = user.transaction do
+        Keygen.logger.info { "[sso] creating new session: profile_id=#{profile.id.inspect} organization_id=#{profile.organization_id.inspect} account_id=#{account.id.inspect} user_id=#{user.id.inspect}" }
+
         # FIXME(ezekg) quirk: https://stackoverflow.com/a/78727914/3247081
         user.sessions.delete_all(:delete_all) # clear current sessions
         user.sessions.create(
@@ -134,7 +140,7 @@ def callback
         )
       end
 
-      unless session.errors.empty?
+      unless session.valid?
         Keygen.logger.warn { "[sso] session is not valid: profile_id=#{profile.id.inspect} organization_id=#{profile.organization_id.inspect} account_id=#{account.id.inspect} user_id=#{user.id.inspect} session_id=#{session.id.inspect} error_messages=#{session.errors.messages.inspect}" }
 
         raise Keygen::Error::InvalidSingleSignOnError.new('session is not valid', code: 'SSO_SESSION_INVALID')