diff --git a/src/handlers/auth.rs b/src/handlers/auth.rs
index a78b0b2..dfa2d2f 100644
--- a/src/handlers/auth.rs
+++ b/src/handlers/auth.rs
@@ -470,8 +470,9 @@ pub async fn web_login_confirm(
     app_state: web::Data<AppState>,
 ) -> impl Responder {
     let short_code = req.code.trim();
+    log::info!("[web_login_confirm] received code={}", short_code);
 
-    // 查找登录码（模糊匹配，因为存入的是 ASD-XXXXXX 格式）
+    // 精确匹配登录码
     let record: Option<(String, String, chrono::DateTime<chrono::Utc>, Option<i32>)> =
         sqlx::query_as(
             "SELECT code, openid, expires_at, user_id FROM web_login_codes WHERE code = $1",