fix(server:auth): don't accept non-username-password transactions in …

…ValidatePassword
actorapp · Jan 11, 2016 · f4db93e · f4db93e
1 parent 914919b
commit f4db93e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...r/actor-rpc-api/src/main/scala/im/actor/server/api/rpc/service/auth/AuthServiceImpl.scala b/...r/actor-rpc-api/src/main/scala/im/actor/server/api/rpc/service/auth/AuthServiceImpl.scala
@@ -346,7 +346,7 @@ final class AuthServiceImpl(val activationContext: CodeActivation)(
   ): Future[HandlerResult[ResponseAuth]] = {
     val action =
       for {
-        transaction ← fromDBIOOption(AuthErrors.PhoneCodeExpired)(AuthTransactionRepo.findChildren(transactionHash))
+        transaction ← fromDBIOOption(AuthErrors.PhoneCodeExpired)(AuthUsernameTransactionRepo.find(transactionHash))
         (userId, countryCode) ← validateCode(transaction, password)
         userStruct ← authorizeT(userId, countryCode, transaction, clientData)
       } yield ResponseAuth(userStruct, ApiConfig(maxGroupSize))