Add strict TOTP validation to block invalid authentication requests - #578

Merged

sharmagot merged 12 commits into

VE-5047020-fix-invalid-totp-validation

Jan 9, 2026

Commits on Dec 8, 2025

Added explicit validation to reject TOTP values containing non-numeric characters.
sharmagot
committed
f5a2d64

Commits on Dec 9, 2025

Improve TOTP validation: trim whitespace and standardize auth error logs
sharmagot
committed
67c50e7

Commits on Dec 14, 2025

Use shared TOTP validator for normalization and consistent error messages
sharmagot
committed
d9ac515

Commits on Jan 2, 2026

Commits on Jan 4, 2026

refactor: unify TOTP authentication error handling
sharmagot
committed
fb1f0e8

Commits on Jan 6, 2026

Normalize TOTP validation and unify invalid TOTP error handling
sharmagot
committed
50600fb
test_totp_invalid_alphanumeric_code
sharmagot
committed
ea83763
corrected the test case
sharmagot
committed
2ff4cdf

Commits on Jan 8, 2026

corrected the test case
sharmagot
committed
fc79ca2
fixed the test case failure
sharmagot
committed
8441867
removed the unnecessary test case
sharmagot
committed
c1ed4ca