astra/owpengram-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix for security bug

Browse source
This commit is contained in:
onysd 2026-07-31 15:29:04 +03:00
parent 7af0e9af58
commit 58ca71f0b7
5 changed files with 68 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

3
internal/otpdelivery/delivery.go
View file

@ -30,6 +30,7 @@ const (
PurposeLoginEmailChange Purpose = "login_email_change"
PurposeChangePhone Purpose = "change_phone"
PurposeConfirmPhone Purpose = "confirm_phone"
PurposePasswordRecovery Purpose = "password_recovery"
)
type Request struct {
@ -47,7 +48,7 @@ func (r Request) Validate(now time.Time) error {
return fmt.Errorf("delivery id is empty or too long")
}
switch r.Purpose {
case PurposeLoginEmail, PurposeLoginSMS, PurposeLoginEmailSetup, PurposeLoginEmailChange, PurposeChangePhone, PurposeConfirmPhone:
case PurposeLoginEmail, PurposeLoginSMS, PurposeLoginEmailSetup, PurposeLoginEmailChange, PurposeChangePhone, PurposeConfirmPhone, PurposePasswordRecovery:
default:
return fmt.Errorf("unsupported delivery purpose %q", r.Purpose)
}