satellite/console: allow only 6-digit code for account activation

Made server to return error in case activation code length is not 6 Issue: storj/storj-private#671 Change-Id: Ib8ffa999beeed1ee508bcecced8362ed8c0ced74
storj · Apr 30, 2024 · a2db5e7 · a2db5e7
1 parent dcd3ccc
commit a2db5e7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/satellite/console/consoleweb/consoleapi/auth.go b/satellite/console/consoleweb/consoleapi/auth.go
@@ -460,6 +460,11 @@ func (a *Auth) ActivateAccount(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	if len(activateData.Code) != 6 {
+		a.serveJSONError(ctx, w, console.ErrValidation.New("the activation code must be 6 characters long"))
+		return
+	}
+
 	verified, unverified, err := a.service.GetUserByEmailWithUnverified(ctx, activateData.Email)
 	if err != nil && !console.ErrEmailNotFound.Has(err) {
 		a.serveJSONError(ctx, w, err)