fix: clean email verification and password fields from secondary user during merge

2026-03-04 16:21:00 +03:00
parent d7a9d2bfba
commit 7b4e9488f6
1 changed files with 7 additions and 0 deletions
@@ -510,6 +510,13 @@ async def execute_merge(
    secondary.referred_by_id = None
    if secondary.email:
        secondary.email = None
+    secondary.email_verified = False
+    secondary.email_verified_at = None
+    secondary.email_verification_token = None
+    secondary.email_verification_expires = None
+    secondary.email_change_new = None
+    secondary.email_change_code = None
+    secondary.password_hash = None
    if secondary.telegram_id:
        secondary.telegram_id = None
    for field in _OAUTH_FIELDS: