Merge pull request #5366 from overleaf/jk-move-password-reset-audit-log

[web] audit password reset before taking action

GitOrigin-RevId: 672f712658b4669a5a750dbc6f97d24ce35c332d

services/web/app/src/Features/PasswordReset/PasswordResetHandler.js

@@ -93,11 +93,6 @@ async function setNewUserPassword(token, password, auditLog) {
     }
   }
 
-  const reset = await AuthenticationManager.promises.setUserPassword(
-    user,
-    password
-  )
-
   await UserAuditLogHandler.promises.addEntry(
     user._id,
     'reset-password',
@@ -105,6 +100,11 @@ async function setNewUserPassword(token, password, auditLog) {
     auditLog.ip
   )
 
+  const reset = await AuthenticationManager.promises.setUserPassword(
+    user,
+    password
+  )
+
   return { found: true, reset, userId: user._id }
 }