feat: implement server-side validation for mobile numbers and national codes across multiple endpoints

src/UserProfile/Controller/UserProfileController.php

@@ -7,6 +7,7 @@ use App\Auth\Repository\UserRepository;
 use App\Shared\Constant\ErrorCodes;
 use App\Shared\Controller\BaseController;
 use App\Shared\Service\FileValidatorService;
+use App\Shared\Service\InputValidator;
 use App\UserProfile\Entity\UserProfile;
 use App\UserProfile\Repository\UserProfileRepository;
 use Symfony\Component\Uid\Uuid;
@@ -129,6 +130,15 @@ class UserProfileController extends BaseController
         }
 
         $data = json_decode($request->getContent(), true) ?? [];
+
+        if (array_key_exists('national_code', $data) && $data['national_code'] !== null && $data['national_code'] !== '') {
+            $code = InputValidator::toEnglishDigits((string) $data['national_code']);
+            if (!InputValidator::isValidIranNationalCode($code)) {
+                return $this->error(ErrorCodes::ERR_VALIDATION_001, 'کد ملی نامعتبر است', 422, 'national_code');
+            }
+            $data['national_code'] = $code;
+        }
+
         $this->hydrate($profile, $data);
         $this->repository->save($profile);