Zareian ca46e66024 keep the login code when Kavenegar answers late instead of failing the request ...

Seen live on 2026-09-27: Kavenegar took 5.4 s, our 5 s timeout fired, the
API answered 503 and deleted the code, but the SMS arrived, so the site
said "service unavailable" while the phone held a code that no longer
worked. A read timeout now means "delivery unknown": the code is kept and
the request succeeds (the cooldown still blocks a second SMS). A failed
connection is still an explicit 503. Read timeout raised to 10 s.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-27 22:06:34 +03:30

..

management

add gamification characters (Duolingo-style mascot catalog)

2026-09-06 13:53:17 +03:30

migrations

harden OTP for real SMS and close the second audit round

2026-09-25 12:28:06 +03:30

templates

Add campaigns/ Add supervisor/ Add messaging features/ Separate SMS

2026-08-25 03:39:41 +03:30

__init__.py

Initial commit - clean project structure

2026-08-18 16:48:15 +03:30

admin.py

cleanup: trim bloated multi-line comments across the project

2026-08-26 03:22:20 +03:30

apps.py

optional short-TTL cache for the auth user row

2026-08-30 08:46:11 +03:30

authentication.py

tutor answers step by step in plain text, islands finish, and the audit's money and login holes are closed

2026-09-25 06:24:13 +03:30

models.py

tutor answers step by step in plain text, islands finish, and the audit's money and login holes are closed

2026-09-25 06:24:13 +03:30

phone.py

harden OTP for real SMS and close the second audit round

2026-09-25 12:28:06 +03:30

receivers.py

optional short-TTL cache for the auth user row

2026-08-30 08:46:11 +03:30

schema.py

Initial commit - clean project structure

2026-08-18 16:48:15 +03:30

serializers.py

harden OTP for real SMS and close the second audit round

2026-09-25 12:28:06 +03:30

services.py

keep the login code when Kavenegar answers late instead of failing the request

2026-09-27 22:06:34 +03:30

signals.py

Initial commit - clean project structure

2026-08-18 16:48:15 +03:30

tests_audit_fixes.py

harden OTP for real SMS and close the second audit round

2026-09-25 12:28:06 +03:30

tests_guest_refresh.py

let a finished island quiz open the next island, and ground ask-AI in the student's book

2026-09-24 02:49:02 +03:30

tests_otp_limits.py

keep the login code when Kavenegar answers late instead of failing the request

2026-09-27 22:06:34 +03:30

tests.py

harden OTP for real SMS and close the second audit round

2026-09-25 12:28:06 +03:30

urls.py

tutor answers step by step in plain text, islands finish, and the audit's money and login holes are closed

2026-09-25 06:24:13 +03:30

views.py

harden OTP for real SMS and close the second audit round

2026-09-25 12:28:06 +03:30