diff options
| author | Adam Soltys <[email protected]> | 2026-10-21 06:15:30 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-10-29 16:40:36 -0700 |
| commit | 772e4470c599c2992a88031b16e1f05c718f0f05 (patch) | |
| tree | 62fc46a168ece31fb2cbad2c5cb8bf693f7ec5de /lib/auth.ts | |
| parent | 5cafd3dad520ea620deee8519c9d26eeeaa258f6 (diff) | |
| download | coinos-server-772e4470c599c2992a88031b16e1f05c718f0f05.tar.gz coinos-server-772e4470c599c2992a88031b16e1f05c718f0f05.zip | |
register: check the reCAPTCHA v3 score, action and hostname; cap signups per network
siteverify answers success for any validly minted v3 token, so success
alone let scripted signups through. Signup now needs the register action
and a 0.5 score, and login 0.3. A token minted for another site is refused.
The web signup page must send a token. Signups are capped per IPv4 /16 or
IPv6 /48, hourly and daily, and those keeping the auto-filled animal+NN
username are capped site-wide per hour. Turnstile is verified and logged
only, on trial.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01NfM8zA4DdKvW1316z4zCaD
Diffstat (limited to 'lib/auth.ts')
0 files changed, 0 insertions, 0 deletions