diff --git a/YLErpWeb/Program.cs b/YLErpWeb/Program.cs
index a9a0a243..af91693c 100644
--- a/YLErpWeb/Program.cs
+++ b/YLErpWeb/Program.cs
@@ -74,8 +74,11 @@ try
             {
                 OnRedirectToLogin = context =>
                 {
-                    if (context.Request.Headers["X-Requested-With"] == "XMLHttpRequest" ||
-                        !context.Request.Headers["Accept"].ToString().Contains("text/html"))
+                    var accept = context.Request.Headers["Accept"].ToString();
+                    var xrw = context.Request.Headers["X-Requested-With"].ToString();
+                    var isAjax = xrw == "XMLHttpRequest" || !accept.Contains("text/html");
+                    logger.Info($"[CookieAuth] OnRedirectToLogin Path={context.Request.Path} Accept={accept} X-Requested-With={xrw} IsAjax={isAjax}");
+                    if (isAjax)
                     {
                         context.Response.StatusCode = 401;
                         return Task.CompletedTask;
@@ -85,8 +88,11 @@ try
                 },
                 OnRedirectToAccessDenied = context =>
                 {
-                    if (context.Request.Headers["X-Requested-With"] == "XMLHttpRequest" ||
-                        !context.Request.Headers["Accept"].ToString().Contains("text/html"))
+                    var accept = context.Request.Headers["Accept"].ToString();
+                    var xrw = context.Request.Headers["X-Requested-With"].ToString();
+                    var isAjax = xrw == "XMLHttpRequest" || !accept.Contains("text/html");
+                    logger.Info($"[CookieAuth] OnRedirectToAccessDenied Path={context.Request.Path} Accept={accept} X-Requested-With={xrw} IsAjax={isAjax}");
+                    if (isAjax)
                     {
                         context.Response.StatusCode = 403;
                         return Task.CompletedTask;