@@ -348,15 +348,13 @@ func (api *API) postChangePasswordWithOneTimePasscode(rw http.ResponseWriter, r
348348})
349349if err != nil && ! errors .Is (err ,sql .ErrNoRows ) {
350350logger .Error (ctx ,"unable to fetch user by email" ,slog .F ("email" ,req .Email ),slog .Error (err ))
351- httpapi .Write (ctx ,rw ,http .StatusInternalServerError , codersdk.Response {
352- Message :"Internal error." ,
353- })
354- return nil
351+ return xerrors .Errorf ("get user by email: %w" ,err )
355352}
356353aReq .Old = user
357354
358355equal ,err := userpassword .Compare (string (user .HashedOneTimePasscode ),req .OneTimePasscode )
359356if err != nil {
357+ logger .Error (ctx ,"unable to compare one time passcode" ,slog .Error (err ))
360358return xerrors .Errorf ("compare one time passcode: %w" ,err )
361359}
362360
@@ -389,6 +387,7 @@ func (api *API) postChangePasswordWithOneTimePasscode(rw http.ResponseWriter, r
389387
390388newHashedPassword ,err := userpassword .Hash (req .Password )
391389if err != nil {
390+ logger .Error (ctx ,"unable to hash user's password" ,slog .Error (err ))
392391return xerrors .Errorf ("hash user password: %w" ,err )
393392}
394393
@@ -398,12 +397,14 @@ func (api *API) postChangePasswordWithOneTimePasscode(rw http.ResponseWriter, r
398397HashedPassword : []byte (newHashedPassword ),
399398})
400399if err != nil {
400+ logger .Error (ctx ,"unable to delete user's hashed password" ,slog .Error (err ))
401401return xerrors .Errorf ("update user hashed password: %w" ,err )
402402}
403403
404404//nolint:gocritic // We need the system auth context to be able to delete all API keys for the user.
405405err = tx .DeleteAPIKeysByUserID (dbauthz .AsSystemRestricted (ctx ),user .ID )
406406if err != nil {
407+ logger .Error (ctx ,"unable to delete user's api keys" ,slog .Error (err ))
407408return xerrors .Errorf ("delete api keys for user: %w" ,err )
408409}
409410
@@ -418,7 +419,6 @@ func (api *API) postChangePasswordWithOneTimePasscode(rw http.ResponseWriter, r
418419return nil
419420},nil )
420421if err != nil {
421- logger .Error (ctx ,"unable to update user's password" ,slog .Error (err ))
422422httpapi .Write (ctx ,rw ,http .StatusInternalServerError , codersdk.Response {
423423Message :"Internal error." ,
424424Detail :err .Error (),