refactor: promo and email bruteforce defence

bot/handlers/user/promo_user.py

@@ -4,7 +4,6 @@ from aiogram import Router, F, types, Bot
 from aiogram.fsm.context import FSMContext
 from typing import Optional
 from sqlalchemy.ext.asyncio import AsyncSession
-from aiogram.utils.markdown import hcode
 
 from config.settings import Settings
 from bot.states.user_states import UserPromoStates
@@ -123,46 +122,41 @@ async def process_promo_code_input(message: types.Message, state: FSMContext,
             except Exception as e:
                 logging.error(f"Failed to send suspicious promo notification: {e}")
 
-        response_to_user_text = _("promo_code_not_found",
-                                  code=hcode(code_input.upper()))
-        reply_markup = get_back_to_main_menu_markup(current_lang, i18n)
+    success, result = await promo_code_service.apply_promo_code(
+        session, user.id, code_input, current_lang)
+    if success:
+        await session.commit()
+        logging.info(
+            f"Promo code '{code_input}' successfully applied for user {user.id}."
+        )
+
+        new_end_date = result if isinstance(result, datetime) else None
+        active = await subscription_service.get_active_subscription_details(session, user.id)
+        config_link_display = active.get("config_link") if active else None
+        connect_button_url = active.get("connect_button_url") if active else None
+        config_link_text = config_link_display or _("config_link_not_available")
+
+        response_to_user_text = _(
+            "promo_code_applied_success_full",
+            end_date=(new_end_date.strftime("%d.%m.%Y %H:%M:%S") if new_end_date else "N/A"),
+            config_link=config_link_text,
+        )
+        reply_markup = get_connect_and_main_keyboard(
+            current_lang,
+            i18n,
+            settings,
+            config_link_display,
+            connect_button_url=connect_button_url,
+        )
     else:
-
-        success, result = await promo_code_service.apply_promo_code(
-            session, user.id, code_input, current_lang)
-        if success:
-            await session.commit()
-            logging.info(
-                f"Promo code '{code_input}' successfully applied for user {user.id}."
-            )
-
-            new_end_date = result if isinstance(result, datetime) else None
-            active = await subscription_service.get_active_subscription_details(session, user.id)
-            config_link_display = active.get("config_link") if active else None
-            connect_button_url = active.get("connect_button_url") if active else None
-            config_link_text = config_link_display or _("config_link_not_available")
-
-            response_to_user_text = _(
-                "promo_code_applied_success_full",
-                end_date=(new_end_date.strftime("%d.%m.%Y %H:%M:%S") if new_end_date else "N/A"),
-                config_link=config_link_text,
-            )
-            reply_markup = get_connect_and_main_keyboard(
-                current_lang,
-                i18n,
-                settings,
-                config_link_display,
-                connect_button_url=connect_button_url,
-            )
-        else:
-            await session.rollback()
-            logging.info(
-                f"Promo code '{code_input}' application failed for user {user.id}. Reason: {result}"
-            )
-            response_to_user_text = result
-            reply_markup = get_back_to_main_menu_markup(
-                current_lang, i18n
-            )
+        await session.commit()
+        logging.info(
+            f"Promo code '{code_input}' application failed for user {user.id}. Reason: {result}"
+        )
+        response_to_user_text = result
+        reply_markup = get_back_to_main_menu_markup(
+            current_lang, i18n
+        )
 
     await message.answer(
         response_to_user_text,