From f87afaceffec08b1762d1ad211a01dcd67596443 Mon Sep 17 00:00:00 2001
From: Tom Brow <tomb@block.xyz>
Date: Fri, 21 Aug 2026 14:32:44 -0700
Subject: [PATCH] Log App Attest enrollment verification failures

Signed-off-by: Tom Brow <tomb@block.xyz>
---
 crates/buzz-push-gateway/src/app_attest.rs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/crates/buzz-push-gateway/src/app_attest.rs b/crates/buzz-push-gateway/src/app_attest.rs
index 2acb3e919e..216bc1d0e7 100644
--- a/crates/buzz-push-gateway/src/app_attest.rs
+++ b/crates/buzz-push-gateway/src/app_attest.rs
@@ -78,7 +78,10 @@ impl AppAttestVerifier {
                 key_id_b64,
                 &self.apple_root_cert_pem,
             )
-            .map_err(|_| AppAttestError::Invalid)?;
+            .map_err(|error| {
+                tracing::warn!(%error, "App Attest enrollment verification failed");
+                AppAttestError::Invalid
+            })?;
         let key_id = STANDARD
             .decode(key_id_b64)
             .map_err(|_| AppAttestError::Invalid)?;