[TEMP] Master OTP code to recover admin access while SMS is broken
CI/CD / CI · dotnet build (push) Successful in 54s
CI/CD / Deploy · hamkadr (push) Successful in 55s

SMS (Kavenegar) is misconfigured so OTP codes are not delivered and Production does not show the code on screen, locking admins out. Accept a temporary master code (956423) for any phone in OtpService.Verify so we can log in and fix the gateway key. MUST be removed once SMS works.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
soroush.asadi
2026-06-04 17:22:03 +03:30
parent c7e4bf059e
commit 02eb761488
@@ -41,8 +41,15 @@ public class OtpService
return code; // dev: surface it on screen return code; // dev: surface it on screen
} }
// ⚠️ TEMPORARY master code — lets us log in while SMS (Kavenegar) is misconfigured.
// REMOVE this and the check below once the gateway/key is fixed.
private const string MasterCode = "956423";
public bool Verify(string phone, string code) public bool Verify(string phone, string code)
{ {
// TEMPORARY: accept the master code for any phone (see MasterCode above). Remove later.
if (code?.Trim() == MasterCode) return true;
if (_cache.TryGetValue(Key(phone), out string? stored) && stored == code?.Trim()) if (_cache.TryGetValue(Key(phone), out string? stored) && stored == code?.Trim())
{ {
_cache.Remove(Key(phone)); _cache.Remove(Key(phone));