Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 1 Packages Projects Releases 1 Wiki Activity

gate4: use separate API session for audit log in confirm_password_reset

Browse Source
This commit is contained in:
Agent Zero
2026-07-31 12:01:11 +02:00
parent a721db5214
commit a303a4e455
1 changed files with 17 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/services/auth_service.py
+17 -12
View File
@@ -335,19 +335,24 @@ class AuthService:
except Exception: except Exception:
logger.warning("Failed to invalidate Redis sessions for user %s", user.id, exc_info=True) logger.warning("Failed to invalidate Redis sessions for user %s", user.id, exc_info=True)
# Audit log entry for password reset # Audit log entry for password reset — use separate API session (crm_api)
# to avoid requiring audit_log INSERT grants on crm_auth
try: try:
from app.core.db import set_tenant_context from app.core.db import get_api_engine, set_tenant_context
await set_tenant_context(db, reset_token.tenant_id) from sqlalchemy.ext.asyncio import AsyncSession
await log_audit( api_engine = get_api_engine()
db, async with AsyncSession(api_engine) as audit_db:
reset_token.tenant_id, await set_tenant_context(audit_db, reset_token.tenant_id)
user.id, await log_audit(
"password_reset", audit_db,
"user", reset_token.tenant_id,
user.id, user.id,
changes={"action": "password_changed"}, "password_reset",
) "user",
user.id,
changes={"action": "password_changed"},
)
await audit_db.commit()
except Exception: except Exception:
logger.warning("Failed to create audit log for password reset of user %s", user.id, exc_info=True) logger.warning("Failed to create audit log for password reset of user %s", user.id, exc_info=True)