From 4b00b4dd332c119246ba357d03fdcba93d0b8789 Mon Sep 17 00:00:00 2001
From: Aaron L <aaron@bettercoder.net>
Date: Wed, 6 Mar 2019 08:25:30 -0800
Subject: [PATCH] Add validation to recover start

---
 CHANGELOG.md       | 1 +
 recover/recover.go | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3eb46c6..c58a5f4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 - Fix bug with missing imports (thanks @frederikhors)
 - Fix bug with inverted remember me checkbox logic
+- Fix validation not happening when user commences recovery
 
 ### Deprecated
 
diff --git a/recover/recover.go b/recover/recover.go
index 72d7b9f..71efaa7 100644
--- a/recover/recover.go
+++ b/recover/recover.go
@@ -84,6 +84,12 @@ func (r *Recover) StartPost(w http.ResponseWriter, req *http.Request) error {
 		return err
 	}
 
+	if errs := validatable.Validate(); errs != nil {
+		logger.Info("recover validation failed")
+		data := authboss.HTMLData{authboss.DataValidation: authboss.ErrorMap(errs)}
+		return r.Authboss.Core.Responder.Respond(w, req, http.StatusOK, PageRecoverStart, data)
+	}
+
 	recoverVals := authboss.MustHaveRecoverStartValues(validatable)
 
 	user, err := r.Authboss.Storage.Server.Load(req.Context(), recoverVals.GetPID())