38e3f6a5a2
CI/CD / CI · API (dotnet build + test) (push) Successful in 46s
CI/CD / CI · Admin API (dotnet build) (push) Successful in 32s
CI/CD / CI · Dashboard (tsc) (push) Successful in 1m4s
CI/CD / CI · Admin Web (tsc) (push) Successful in 34s
CI/CD / CI · Website (tsc) (push) Successful in 43s
CI/CD / CI · Koja (tsc) (push) Successful in 49s
CI/CD / Deploy · all services (push) Successful in 27s
VerifyOtpRequestValidator was passing the raw phone string to IsValidIranMobile which requires a pre-normalized 11-digit "09…" string. Any other format (country code prefix, Persian digits, etc.) failed validation instantly — causing verify-otp to return HTTP 400 in ~2ms before the service logic could ever run. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>