From a721db5214090dd61d356863b5d62d8947da579b Mon Sep 17 00:00:00 2001
From: Agent Zero <agent@media-on.de>
Date: Fri, 31 Jul 2026 11:58:11 +0200
Subject: [PATCH] gate4: set tenant context before audit log in
 confirm_password_reset

---
 app/services/auth_service.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app/services/auth_service.py b/app/services/auth_service.py
index 07a4817..02e857e 100644
--- a/app/services/auth_service.py
+++ b/app/services/auth_service.py
@@ -337,6 +337,8 @@ class AuthService:
 
         # Audit log entry for password reset
         try:
+            from app.core.db import set_tenant_context
+            await set_tenant_context(db, reset_token.tenant_id)
             await log_audit(
                 db,
                 reset_token.tenant_id,