Skip to content

fix(auth): require sms code strings - #205

Merged
ralyodio merged 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/verify-sms-code-string-guard
Jul 30, 2026
Merged

fix(auth): require sms code strings#205
ralyodio merged 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/verify-sms-code-string-guard

Conversation

@aiirvizionz

Copy link
Copy Markdown
Contributor

Summary

  • reject non-string SMS verification codes before OTP verification
  • avoid coercing numeric codes through the six-digit regex path
  • keep invalid-code logging safe for non-string values

Test

  • node node_modules\vitest\vitest.mjs run --config %TEMP%\qryptchat-vitest-minimal.config.mjs "src/app/api/auth/verify-sms/route.test.js"
  • git diff --check

uGig billing

  • Expected invoice: 0.50 USD if accepted/merged
  • Counted as revenue now: no, pending review/payment

@ralyodio
ralyodio merged commit b60771c into profullstack:master Jul 30, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants