From e92612581e0faa589415b0fa555bead3dd38dc70 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=B9=BE=E7=94=B0=E7=B4=94=E5=B9=B3?=
 <iktahana@iktahana-Mac-mini.local>
Date: Sun, 1 Mar 2026 17:00:21 +0900
Subject: [PATCH] fix: add card number validation to return 422 for invalid
 input (Closes stayforge/Stayforge_Networks_Access#9)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 src/card.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/card.py b/src/card.py
index 1bd0473..b427eb8 100644
--- a/src/card.py
+++ b/src/card.py
@@ -96,7 +96,9 @@ def remove_created_at(cls, values: dict) -> dict:
 
 
 class CardQuery(BaseModel):
-    number: str = Field(..., description="Card number to be queried")
+    number: constr(min_length=1, max_length=128, pattern="^[a-zA-Z0-9]+$") = Field(
+        ..., description="Card number to be queried"
+    )
 
 
 class CardResponse(CardModel):