Merge pull request #951 from zeroclaw-labs/fix/per-client-pairing-lockout

fix(security): change pairing lockout to per-client accounting
This commit is contained in:
Alex Gorevski 2026-02-19 11:26:46 -08:00 committed by GitHub
commit 77609777ab
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 73 additions and 28 deletions

View file

@ -626,7 +626,7 @@ impl TelegramChannel {
if let Some(code) = Self::extract_bind_code(text) {
if let Some(pairing) = self.pairing.as_ref() {
match pairing.try_pair(code).await {
match pairing.try_pair(code, &chat_id).await {
Ok(Some(_token)) => {
let bind_identity = normalized_sender_id.clone().or_else(|| {
if normalized_username.is_empty() || normalized_username == "unknown" {