style(auth): simplify OTP redaction regex

aspiers · aspiers · commit fd50cf062b51 · 2026-07-20T13:58:01.000+01:00
Use concise digit character classes so SonarCloud accepts the OTP subject sanitizer added for #185.\n\nCo-authored-by: OpenAI <noreply@openai.com>
diff --git a/packages/auth-service/src/routes/resend-webhook.ts b/packages/auth-service/src/routes/resend-webhook.ts
@@ -147,7 +147,7 @@ function verifyResendWebhook(
 }
 
 const NUMERIC_OTP_CANDIDATE =
-  /(^|[^0-9])((?:[0-9]{3,4}(?: [0-9]{3,4}){1,3}|[0-9]{4,12}))(?![0-9])/g
+  /(^|\D)((?:\d{3,4}(?: \d{3,4}){1,3}|\d{4,12}))(?!\d)/g
 const ALPHANUMERIC_OTP_CANDIDATE =
   /(^|[^A-Za-z0-9])((?:[A-Z0-9]{3,4}(?: [A-Z0-9]{3,4}){1,3}|[A-Z0-9]{4,12}))(?![A-Za-z0-9])/g
 

Original file line number	Diff line number	Diff line change
`@@ -147,7 +147,7 @@ function verifyResendWebhook(`
`147`	`147`	`}`
`148`	`148`
`149`	`149`	`const NUMERIC_OTP_CANDIDATE =`
`150`		`- /(^\|[^0-9])((?:[0-9]{3,4}(?: [0-9]{3,4}){1,3}\|[0-9]{4,12}))(?![0-9])/g`
	`150`	`+ /(^\|\D)((?:\d{3,4}(?: \d{3,4}){1,3}\|\d{4,12}))(?!\d)/g`
`151`	`151`	`const ALPHANUMERIC_OTP_CANDIDATE =`
`152`	`152`	`/(^\|[^A-Za-z0-9])((?:[A-Z0-9]{3,4}(?: [A-Z0-9]{3,4}){1,3}\|[A-Z0-9]{4,12}))(?![A-Za-z0-9])/g`
`153`	`153`