aboutsummaryrefslogtreecommitdiffstats
path: root/scripts/migrate.py
diff options
context:
space:
mode:
authorAdam Soltys <[email protected]>2026-10-21 06:15:30 -0700
committerAdam Soltys <[email protected]>2026-10-29 16:40:36 -0700
commit772e4470c599c2992a88031b16e1f05c718f0f05 (patch)
tree62fc46a168ece31fb2cbad2c5cb8bf693f7ec5de /scripts/migrate.py
parent5cafd3dad520ea620deee8519c9d26eeeaa258f6 (diff)
downloadcoinos-server-772e4470c599c2992a88031b16e1f05c718f0f05.tar.gz
coinos-server-772e4470c599c2992a88031b16e1f05c718f0f05.zip
register: check the reCAPTCHA v3 score, action and hostname; cap signups per network
siteverify answers success for any validly minted v3 token, so success alone let scripted signups through. Signup now needs the register action and a 0.5 score, and login 0.3. A token minted for another site is refused. The web signup page must send a token. Signups are capped per IPv4 /16 or IPv6 /48, hourly and daily, and those keeping the auto-filled animal+NN username are capped site-wide per hour. Turnstile is verified and logged only, on trial. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01NfM8zA4DdKvW1316z4zCaD
Diffstat (limited to 'scripts/migrate.py')
0 files changed, 0 insertions, 0 deletions