From 1a9c8c16c688a493591c0995a9e3f0458058191e Mon Sep 17 00:00:00 2001
From: David Stone <davidjamesstone@gmail.com>
Date: Thu, 14 May 2026 10:21:01 +0100
Subject: [PATCH] Set `logUnauthorized: false` in crumb plugin configuration

---
 src/server/plugins/crumb.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/server/plugins/crumb.ts b/src/server/plugins/crumb.ts
index 2bd3ae378..f571ffce6 100644
--- a/src/server/plugins/crumb.ts
+++ b/src/server/plugins/crumb.ts
@@ -10,7 +10,7 @@ export const configureCrumbPlugin = (
   return {
     plugin: crumb,
     options: {
-      logUnauthorized: true,
+      logUnauthorized: false,
       enforce: routeConfig?.enforceCsrf ?? config.get('enforceCsrf'),
       cookieOptions: {
         isSecure: config.get('isProduction')