Oh, it’s a great tip. As many of us, I’ve started a lot of projects, invested in creating auth processes, to suddenly get bored from the project and abandon it. Result: 0 users. 1 failure.
Could you log the headers and body though? I looked into it a little and it looks tricky (requires buffering incoming request body to individual files, which are then your logs of the request body which have to be correlated somehow with the log files.)
After it happens, you’ll have more time to play with AI :D