Record safe context
Capture timestamp, generated SMTP username, client product/version, and exact SMTP response. Never include the password, OAuth token, recipient list, or message content.
Current generic responses
The current server intentionally returns generic authentication and submission failures rather than exposing internal details. Diagnose using the stage: connect, STARTTLS, authenticate, MAIL FROM, RCPT TO, or DATA.