From e8ca8fc77d1ab5574809f78418ae7b00da60b85e Mon Sep 17 00:00:00 2001 From: SoClose <33631880+SoClosee@users.noreply.github.com> Date: Thu, 5 Mar 2026 15:07:37 +0100 Subject: [PATCH] fix(verify.py): replace hardcoded verification token with environment variable --- handlers/verify.py | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/handlers/verify.py b/handlers/verify.py index 59f3303..d8c8052 100644 --- a/handlers/verify.py +++ b/handlers/verify.py @@ -1,21 +1,21 @@ +import os import logging from datetime import datetime - -from aiogram import Bot, Router from aiogram.filters import Command from aiogram.types import CallbackQuery, Message -from config import settings +from config import get_settings from database import queries from keyboards.callbacks import MenuCallback, VerifyCallback from services.gamification import award_etoiles, process_referral_first_mission from utils.helpers import utcnow from utils.texts import Texts +settings = get_settings() logger = logging.getLogger(__name__) router = Router(name="verify") -VERIFY_COOLDOWN_SECONDS = 60 +VERIFY_COOLDOWN_SECONDS = settings.verification_cooldown_seconds async def _run_verification(db_user: dict, send_func, bot: Bot) -> None: @@ -24,7 +24,9 @@ async def _run_verification(db_user: dict, send_func, bot: Bot) -> None: if not db_user["is_registered"]: await send_func(Texts.MISSION_NOT_REGISTERED, parse_mode="HTML") return - + token = os.getenv('VERIFICATION_TOKEN') + if not token: + raise ValueError("Verification token is missing") active = await queries.get_active_mission_batch(db_user["id"]) if not active: await send_func(Texts.VERIFY_NO_ACTIVE_MISSION, parse_mode="HTML")