@h-ai/iam 1.0.0-beta.20 → 1.0.0-beta.22

package/dist/index.js

@@ -5990,7 +5990,7 @@ function buildRegistrationOps(ctx) {
       await userRepository.deleteById(createdUser.id);
       return assigned;
     }
-    logger13.info("User registered", { userId: createdUser.id, username: options.username });
+    logger13.info("User registered", { userId: createdUser.id });
     return ok({
       user: toUser(createdUser),
       agreements: buildAgreementDisplay(agreementConfig, agreementConfig.showOnRegister)
@@ -6454,17 +6454,17 @@ function buildPasswordResetOps(ctx) {
       const captcha = await verifyIamCaptcha(ctx.config.captcha, "passwordReset", options?.captcha);
       if (!captcha.success)
         return captcha;
-      logger13.debug("Password reset requested", { identifier });
+      logger13.debug("Password reset requested");
       const resetConfig = ctx.resetConfig;
       if (!resetConfig.enabled || !onPasswordResetRequest)
         return err(HaiIamError.PASSWORD_RESET_DISABLED, iamM("iam_passwordResetDisabled"));
       const userResult = await userRepository.findByIdentifier(identifier);
       if (!userResult.success) {
-        logger13.warn("Failed to look up user for password reset", { identifier });
+        logger13.warn("Failed to look up user for password reset", { reasonCode: userResult.error.code });
         return ok(void 0);
       }
       if (!userResult.data) {
-        logger13.debug("User not found for password reset, returning ok to prevent enumeration", { identifier });
+        logger13.debug("User not found for password reset");
         return ok(void 0);
       }
       const user = toUser(userResult.data);