Properly handle PhoneCodeExpiredError in sign_in

Should actually fix #3185 now.

telethon/client/auth.py

@@ -333,12 +333,9 @@ class AuthMethods:
 
             # May raise PhoneCodeEmptyError, PhoneCodeExpiredError,
             # PhoneCodeHashEmptyError or PhoneCodeInvalidError.
-            try:
             request = functions.auth.SignInRequest(
                 phone, phone_code_hash, str(code)
             )
-            except errors.PhoneCodeExpiredError:
-                self._phone_code_hash.pop(phone, None)
         elif password:
             pwd = await self(functions.account.GetPasswordRequest())
             request = functions.auth.CheckPasswordRequest(
@@ -355,7 +352,12 @@ class AuthMethods:
                 'and a password only if an RPCError was raised before.'
             )
 
+        try:
             result = await self(request)
+        except errors.PhoneCodeExpiredError:
+            self._phone_code_hash.pop(phone, None)
+            raise
+
         if isinstance(result, types.auth.AuthorizationSignUpRequired):
             # Emulate pre-layer 104 behaviour
             self._tos = result.terms_of_service

telethon/version.py

@@ -1,3 +1,3 @@
 # Versions should comply with PEP440.
 # This line is parsed in setup.py:
-__version__ = '1.28.0'
+__version__ = '1.28.1'