From 76d4e1ab23c49f29032d2c3b7b1fc4e39555918d Mon Sep 17 00:00:00 2001
From: Shlee <github@shl.ee>
Date: Mon, 7 Sep 2026 15:54:42 +0930
Subject: [PATCH] Change 2FA code validation to require 6 digits

---
 app/Http/Controllers/Settings/SecuritySettings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Http/Controllers/Settings/SecuritySettings.php b/app/Http/Controllers/Settings/SecuritySettings.php
index f1cf490dc..d775aec66 100644
--- a/app/Http/Controllers/Settings/SecuritySettings.php
+++ b/app/Http/Controllers/Settings/SecuritySettings.php
@@ -81,7 +81,7 @@ trait SecuritySettings
             abort(403, 'Two factor auth is already setup.');
         }
         $this->validate($request, [
-            'code' => 'required|integer',
+            'code' => 'required|digits:6',
         ]);
         $code = $request->input('code');
         $google2fa = new Google2FA;