Logging on password reset/change (#6901)

scalableminds · Mar 6, 2023 · 9cf4215 · 9cf4215
1 parent f1a70e4
commit 9cf4215
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/app/controllers/AuthenticationController.scala b/app/controllers/AuthenticationController.scala
@@ -394,6 +394,7 @@ class AuthenticationController @Inject()(
         bearerTokenAuthenticatorService.userForToken(passwords.token.trim).futureBox.flatMap {
           case Full(user) =>
             for {
+              - <- Fox.successful(logger.info(s"Multiuser ${user._multiUser} reset their password."))
               _ <- multiUserDAO.updatePasswordInfo(user._multiUser, passwordHasher.hash(passwords.password1))(
                 GlobalAccessContext)
               _ <- bearerTokenAuthenticatorService.remove(passwords.token.trim)
@@ -420,6 +421,7 @@ class AuthenticationController @Inject()(
                   Future.successful(NotFound(Messages("error.noUser")))
                 case Some(user) =>
                   for {
+                    - <- Fox.successful(logger.info(s"Multiuser ${user._multiUser} changed their password."))
                     _ <- multiUserDAO.updatePasswordInfo(user._multiUser, passwordHasher.hash(passwords.password1))
                     _ <- combinedAuthenticatorService.discard(request.authenticator, Ok)
                     userEmail <- userService.emailFor(user)