anchor.diff:        try {
           token = TokenInfo.fromJson(json.decode(tokenJson) as Map<String, dynamic>);
         } on FormatException {
  +        log.warning('Failed to decode token JSON: $tokenJson');
           throw InternalServerError('Invalid JSON: "$tokenJson"');
         }
   
  
positive.code:     // Authenticate as a signed-in Google account via OAuth id token.
      final HttpClient client = httpClientProvider();
      try {
        final HttpClientRequest verifyTokenRequest = await client.getUrl(Uri.https(
          'oauth2.googleapis.com',
          '/tokeninfo',
  
negative.code:         return AuthenticatedContext(clientContext: clientContext);
        }
  
        log.warning('${token.email} is not allowed');
        throw Unauthenticated('${token.email} is not allowed');
      } finally {
        client.close();
  