feat: observability — Winston logging, pagination admin, N+1 playlists

backend/src/middleware/auth.middleware.ts

@@ -1,4 +1,5 @@
 import { Request, Response, NextFunction } from "express";
+import logger from "../utils/logger";
 
 export interface AuthenticatedUser {
   id: string;
@@ -40,7 +41,7 @@ export const requireAuth = async (
 
   const superOAuthUrl = process.env.SUPER_OAUTH_URL;
   if (!superOAuthUrl) {
-    console.error("SUPER_OAUTH_URL not configured");
+    logger.error("SUPER_OAUTH_URL not configured");
     res.status(500).json({ success: false, error: "INTERNAL_ERROR", message: "Auth service not configured" });
     return;
   }
@@ -65,7 +66,8 @@ export const requireAuth = async (
 
     (req as AuthenticatedRequest).user = data.data.user;
     next();
-  } catch {
+  } catch (err) {
+    logger.error("requireAuth — auth service unreachable", { err });
     res.status(500).json({ success: false, error: "AUTH_SERVICE_UNAVAILABLE", message: "Authentication service unreachable" });
   }
 };