From a6d219453c2d2b421f0ea482525ce32711746b7b Mon Sep 17 00:00:00 2001
From: Serge RAKOTO HARRY-NAIVO <serge@datapult.ai>
Date: Sun, 10 May 2026 23:14:30 +0200
Subject: [PATCH] fix(site): setup-password.html validation token 64 -> 96
 chars

Bug compagnon de api PR #57 : crypto.randomBytes(48).toString hex = 96
caracteres, pas 64. La validation JS cote site rejetait tous les vrais
tokens avec 'Lien invalide ou incomplet'.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 setup-password.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup-password.html b/setup-password.html
index 0b1d54e..b49949c 100644
--- a/setup-password.html
+++ b/setup-password.html
@@ -200,7 +200,7 @@
       }
 
       async function init() {
-        if (!token || token.length !== 64 || !/^[a-f0-9]+$/i.test(token)) {
+        if (!token || token.length !== 96 || !/^[a-f0-9]+$/i.test(token)) {
           showError("Lien invalide ou incomplet.");
           return;
         }
-- 
2.45.2