diff --git a/nuxt4-app/server/api/debug-config.get.ts b/nuxt4-app/server/api/debug-config.get.ts
new file mode 100644
index 0000000..942cfd7
--- /dev/null
+++ b/nuxt4-app/server/api/debug-config.get.ts
@@ -0,0 +1,31 @@
+/**
+ * Debug Config Endpoint
+ * Ruta: /api/debug-config
+ *
+ * TEMPORAL: Para verificar que las variables de entorno se estén cargando
+ * BORRAR EN PRODUCCIÓN
+ */
+export default defineEventHandler((event) => {
+  const runtimeConfig = useRuntimeConfig(event)
+
+  return {
+    oauth: {
+      authentik: {
+        clientId: runtimeConfig.oauth.authentik.clientId ? 'SET (hidden)' : 'MISSING',
+        clientSecret: runtimeConfig.oauth.authentik.clientSecret ? 'SET (hidden)' : 'MISSING',
+        serverUrl: runtimeConfig.oauth.authentik.serverUrl || 'MISSING',
+        redirectURL: runtimeConfig.oauth.authentik.redirectURL || 'MISSING',
+      }
+    },
+    public: {
+      appUrl: runtimeConfig.public.appUrl || 'MISSING'
+    },
+    env: {
+      NODE_ENV: process.env.NODE_ENV,
+      // Verificar directamente las env vars
+      NUXT_OAUTH_AUTHENTIK_SERVER_URL: process.env.NUXT_OAUTH_AUTHENTIK_SERVER_URL || 'MISSING',
+      NUXT_OAUTH_AUTHENTIK_REDIRECT_URL: process.env.NUXT_OAUTH_AUTHENTIK_REDIRECT_URL || 'MISSING',
+      NUXT_PUBLIC_APP_URL: process.env.NUXT_PUBLIC_APP_URL || 'MISSING',
+    }
+  }
+})
diff --git a/nuxt4-app/server/utils/oauth-authentik.ts b/nuxt4-app/server/utils/oauth-authentik.ts
index 5ec122a..b5fc0da 100644
--- a/nuxt4-app/server/utils/oauth-authentik.ts
+++ b/nuxt4-app/server/utils/oauth-authentik.ts
@@ -54,6 +54,14 @@ export function oauthAuthentikEventHandler({
   return eventHandler(async (event: H3Event) => {
     const runtimeConfig = useRuntimeConfig(event)
 
+    // Debug: Log configuration
+    console.log('OAuth Authentik Config:', {
+      clientId: runtimeConfig.oauth.authentik.clientId ? '***' : 'MISSING',
+      clientSecret: runtimeConfig.oauth.authentik.clientSecret ? '***' : 'MISSING',
+      serverUrl: runtimeConfig.oauth.authentik.serverUrl,
+      redirectURL: runtimeConfig.oauth.authentik.redirectURL,
+    })
+
     // Merge config with defaults
     const authentikConfig = defu(config, {
       clientId: runtimeConfig.oauth.authentik.clientId,