From bf9d61e537cb9d986584f69c01486d349d39d7e1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 13 Aug 2025 23:10:15 +0000
Subject: [PATCH 1/2] Bump virtualenv from 20.33.1 to 20.34.0

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.33.1 to 20.34.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.33.1...20.34.0)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 20.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 poetry.lock    | 8 ++++----
 pyproject.toml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index 74dfe301d..bbb4f8b12 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -3813,14 +3813,14 @@ zstd = ["zstandard (>=0.18.0)"]
 
 [[package]]
 name = "virtualenv"
-version = "20.33.1"
+version = "20.34.0"
 description = "Virtual Python Environment builder"
 optional = false
 python-versions = ">=3.8"
 groups = ["main", "dev"]
 files = [
-    {file = "virtualenv-20.33.1-py3-none-any.whl", hash = "sha256:07c19bc66c11acab6a5958b815cbcee30891cd1c2ccf53785a28651a0d8d8a67"},
-    {file = "virtualenv-20.33.1.tar.gz", hash = "sha256:1b44478d9e261b3fb8baa5e74a0ca3bc0e05f21aa36167bf9cbf850e542765b8"},
+    {file = "virtualenv-20.34.0-py3-none-any.whl", hash = "sha256:341f5afa7eee943e4984a9207c025feedd768baff6753cd660c857ceb3e36026"},
+    {file = "virtualenv-20.34.0.tar.gz", hash = "sha256:44815b2c9dee7ed86e387b842a84f20b93f7f417f95886ca1996a72a4138eb1a"},
 ]
 
 [package.dependencies]
@@ -4210,4 +4210,4 @@ cffi = ["cffi (>=1.11)"]
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.12.9"
-content-hash = "3df64b2f9b6da2bfa4ec2f5bb4ab385bb548095ee351b77ecc348ed94c84a276"
+content-hash = "abce4ee7aee8420463e9263c1511973b65ec85cbbe4802455e49550e22ead3cb"
diff --git a/pyproject.toml b/pyproject.toml
index 7dba15733..f1a6369ae 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -70,7 +70,7 @@ requests = "^2.32.4"
 six = "^1.16.0"
 urllib3 = "^2.5.0"
 webencodings = "^0.5.1"
-virtualenv = "<20.34"
+virtualenv = "<20.35"
 
 
 [tool.poetry.group.dev.dependencies]

From a59b820995d146cb094dd070302b18a4ad4dac95 Mon Sep 17 00:00:00 2001
From: Kenneth Kehl <@kkehl@flexion.us>
Date: Thu, 14 Aug 2025 10:46:45 -0700
Subject: [PATCH 2/2] fix login.gov error

---
 app/main/views/register.py | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/app/main/views/register.py b/app/main/views/register.py
index 5bfb55eb3..c1fd591d2 100644
--- a/app/main/views/register.py
+++ b/app/main/views/register.py
@@ -154,17 +154,21 @@ def set_up_your_profile():
     code = request.args.get("code")
     state = request.args.get("state")
 
+    login_gov_error = request.args.get("error")
+    if login_gov_error:
+        flash(f"Login.gov error: {login_gov_error}")
+        abort(403, f"login_gov_error {login_gov_error} #invites")
+
+    if not state:
+        flash("Login.gov state not detected")
+        abort(403, "Login.gov state not detected #invites")
+
     state_key = f"login-state-{unquote(state)}"
     stored_state = unquote(redis_client.get(state_key).decode("utf8"))
     if state != stored_state:
         flash("Internal error: cannot recognize stored state")
         abort(403, "Internal error: cannot recognize stored state #invites")
 
-    login_gov_error = request.args.get("error")
-    if login_gov_error:
-        flash(f"Login.gov error: {login_gov_error}")
-        abort(403, f"login_gov_error {login_gov_error} #invites")
-
     user_email = redis_client.get(f"user_email-{state}")
     user_uuid = redis_client.get(f"user_uuid-{state}")