From 92b04c24fe3ef5aada83be0ec31dcd3e299df52f Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kspearrin@users.noreply.github.com>
Date: Wed, 8 Apr 2026 11:31:45 -0400
Subject: [PATCH] new event log for 2fa recovery (#20055)

---
 .../src/app/dirt/event-logs/services/event.service.ts    | 7 +++++++
 apps/web/src/locales/en/messages.json                    | 9 +++++++++
 .../src/dirt/event-logs/enums/event-category.enum.ts     | 1 +
 libs/common/src/dirt/event-logs/enums/event-type.enum.ts | 1 +
 4 files changed, 18 insertions(+)

diff --git a/apps/web/src/app/dirt/event-logs/services/event.service.ts b/apps/web/src/app/dirt/event-logs/services/event.service.ts
index f19cde46808..233dc467004 100644
--- a/apps/web/src/app/dirt/event-logs/services/event.service.ts
+++ b/apps/web/src/app/dirt/event-logs/services/event.service.ts
@@ -299,6 +299,13 @@ export class EventService {
           this.getShortId(ev.organizationUserId),
         );
         break;
+      case EventType.OrganizationUser_AdminResetTwoFactor:
+        msg = this.i18nService.t("eventAdminResetTwoFactor", this.formatOrgUserId(ev));
+        humanReadableMsg = this.i18nService.t(
+          "eventAdminResetTwoFactor",
+          this.getShortId(ev.organizationUserId),
+        );
+        break;
       case EventType.OrganizationUser_ResetSsoLink:
         msg = this.i18nService.t("eventResetSsoLink", this.formatOrgUserId(ev));
         humanReadableMsg = this.i18nService.t(
diff --git a/apps/web/src/locales/en/messages.json b/apps/web/src/locales/en/messages.json
index 71884b33a12..1da8c39bc1e 100644
--- a/apps/web/src/locales/en/messages.json
+++ b/apps/web/src/locales/en/messages.json
@@ -6619,6 +6619,15 @@
       }
     }
   },
+  "eventAdminResetTwoFactor": {
+    "message": "Two-step login reset for user $ID$.",
+    "placeholders": {
+      "id": {
+        "content": "$1",
+        "example": "John Smith"
+      }
+    }
+  },
   "eventResetSsoLink": {
     "message": "Reset SSO link for user $ID$",
     "placeholders": {
diff --git a/libs/common/src/dirt/event-logs/enums/event-category.enum.ts b/libs/common/src/dirt/event-logs/enums/event-category.enum.ts
index 21a97b3704c..74f1dd43ef8 100644
--- a/libs/common/src/dirt/event-logs/enums/event-category.enum.ts
+++ b/libs/common/src/dirt/event-logs/enums/event-category.enum.ts
@@ -68,6 +68,7 @@ export const EventCategoryEventTypes: Record<EventCategory, EventType[]> = {
     EventType.OrganizationUser_ResetPassword_Enroll,
     EventType.OrganizationUser_ResetPassword_Withdraw,
     EventType.OrganizationUser_AdminResetPassword,
+    EventType.OrganizationUser_AdminResetTwoFactor,
     EventType.OrganizationUser_ResetSsoLink,
     EventType.OrganizationUser_FirstSsoLogin,
     EventType.OrganizationUser_Revoked,
diff --git a/libs/common/src/dirt/event-logs/enums/event-type.enum.ts b/libs/common/src/dirt/event-logs/enums/event-type.enum.ts
index 995896080f6..c86a2bb2877 100644
--- a/libs/common/src/dirt/event-logs/enums/event-type.enum.ts
+++ b/libs/common/src/dirt/event-logs/enums/event-type.enum.ts
@@ -62,6 +62,7 @@ export enum EventType {
   OrganizationUser_Left = 1516,
   OrganizationUser_AutomaticallyConfirmed = 1517,
   OrganizationUser_SelfRevoked = 1518,
+  OrganizationUser_AdminResetTwoFactor = 1519,
 
   Organization_Updated = 1600,
   Organization_PurgedVault = 1601,