From 7b4e9488f6fbd1271f063579e48ca9a3c96cb645 Mon Sep 17 00:00:00 2001
From: Fringg <egor.andrianovv@gmail.com>
Date: Wed, 4 Mar 2026 16:21:00 +0300
Subject: [PATCH] fix: clean email verification and password fields from
 secondary user during merge

---
 app/services/account_merge_service.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/app/services/account_merge_service.py b/app/services/account_merge_service.py
index 339feb63..9144b3bc 100644
--- a/app/services/account_merge_service.py
+++ b/app/services/account_merge_service.py
@@ -510,6 +510,13 @@ async def execute_merge(
     secondary.referred_by_id = None
     if secondary.email:
         secondary.email = None
+    secondary.email_verified = False
+    secondary.email_verified_at = None
+    secondary.email_verification_token = None
+    secondary.email_verification_expires = None
+    secondary.email_change_new = None
+    secondary.email_change_code = None
+    secondary.password_hash = None
     if secondary.telegram_id:
         secondary.telegram_id = None
     for field in _OAUTH_FIELDS: