From 7f761f751a1832cb63e45f7e113b1bbbcfeffc39 Mon Sep 17 00:00:00 2001
From: Egor fureunoir Gorbunov <contact@fureunoir.com>
Date: Wed, 28 May 2025 15:26:53 +0300
Subject: [PATCH] Fixes: 1) Correct token decoding in user activation check.

Extra: None.
---
 vibes_auth/viewsets.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vibes_auth/viewsets.py b/vibes_auth/viewsets.py
index a1819b57..fada32f8 100644
--- a/vibes_auth/viewsets.py
+++ b/vibes_auth/viewsets.py
@@ -105,7 +105,7 @@ class UserViewSet(
         try:
             uuid = urlsafe_base64_decode(request.data.get("uidb64")).decode()
             user = User.objects.nocache().get(pk=uuid)
-            if not user.check_token(request.data.get("token")):
+            if not user.check_token(urlsafe_base64_decode(request.data.get("token"))):
                 return Response(
                     {"error": _("activation link is invalid!")},
                     status=status.HTTP_400_BAD_REQUEST,