App passwords created through login flow v1 and v2 and the app
password API, and deleting an app password through the API, are now
written to the audit log with the same operations the settings app
uses (auth.app_password.created and auth.app_password.deleted).
A password reset request is logged with the resolved user ID once the
reset token has been created, and a finished remote wipe is logged
when the device confirms it.
The token and the password are never logged.
Assisted-by: ClaudeCode:claude-opus-5-5
Signed-off-by: Ghassen kefi <ghassen.kefi.dev@gmail.com>
Ghassen kefi
d052c4f17d