Ghassen kefi d052c4f17d feat(core): log app passwords, password reset requests and finished remote wipes ...

App passwords created through login flow v1 and v2 and the app
password API, and deleting an app password through the API, are now
written to the audit log with the same operations the settings app
uses (auth.app_password.created and auth.app_password.deleted).

A password reset request is logged with the resolved user ID once the
reset token has been created, and a finished remote wipe is logged
when the device confirms it.

The token and the password are never logged.

Assisted-by: ClaudeCode:claude-opus-5-5
Signed-off-by: Ghassen kefi <ghassen.kefi.dev@gmail.com>

2026-10-15 12:24:12 +02:00

..

CronService.php

chore: Fix manually all strict comparaison

2026-09-10 10:00:35 +02:00

LoginFlowV2Service.php

feat(core): log app passwords, password reset requests and finished remote wipes

2026-10-15 12:24:12 +02:00