<feed xmlns='http://www.w3.org/2005/Atom'>
<title>coinos-server.git/lib/default-names.ts, branch master</title>
<subtitle>coinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)</subtitle>
<id>https://git.coinos.io/coinos-server.git/atom?h=master</id>
<link rel='self' href='https://git.coinos.io/coinos-server.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.coinos.io/coinos-server.git/'/>
<updated>2026-10-29T23:40:36Z</updated>
<entry>
<title>register: check the reCAPTCHA v3 score, action and hostname; cap signups per network</title>
<updated>2026-10-29T23:40:36Z</updated>
<author>
<name>Adam Soltys</name>
<email>adam@coinos.io</email>
</author>
<published>2026-10-21T13:15:30Z</published>
<link rel='alternate' type='text/html' href='https://git.coinos.io/coinos-server.git/commit/?id=772e4470c599c2992a88031b16e1f05c718f0f05'/>
<id>urn:sha1:772e4470c599c2992a88031b16e1f05c718f0f05</id>
<content type='text'>
siteverify answers success for any validly minted v3 token, so success
alone let scripted signups through. Signup now needs the register action
and a 0.5 score, and login 0.3. A token minted for another site is refused.
The web signup page must send a token. Signups are capped per IPv4 /16 or
IPv6 /48, hourly and daily, and those keeping the auto-filled animal+NN
username are capped site-wide per hour. Turnstile is verified and logged
only, on trial.

Co-Authored-By: Claude Opus 5.5 &lt;noreply@anthropic.com&gt;
Claude-Session: https://claude.ai/code/session_01NfM8zA4DdKvW1316z4zCaD
</content>
</entry>
</feed>
