Skip to content

feat(auth): implement cloudflare turnstile on login page#1888

Open
makors wants to merge 1 commit into
tjcsl:devfrom
makors:turnstile-squashed
Open

feat(auth): implement cloudflare turnstile on login page#1888
makors wants to merge 1 commit into
tjcsl:devfrom
makors:turnstile-squashed

Conversation

@makors

@makors makors commented Apr 19, 2026

Copy link
Copy Markdown
Contributor

Proposed changes

  • Adds a Cloudflare Turnstile widget to the login/auth form with proper validation checks
  • CSS/JS changes for functionality and to allow for the Turnstile widget to fit if it's visible (typically invisible, sometimes visible. see managed mode)
  • Adds tests for the CAPTCHA solution and updates current ones accordingly with cases for enabled and disabled CAPTCHAs

Brief description of rationale

This increases the cost of brute forcing Ion with logins (bypassing IP rate limiting is menial) with CAPTCHAs in addition to the current login security measures.

Replaces #1873 , closes #1758

@makors makors requested a review from a team as a code owner April 19, 2026 01:27
@makors makors marked this pull request as draft April 19, 2026 01:29
@makors

makors commented Apr 19, 2026

Copy link
Copy Markdown
Contributor Author
The format of commit c27350defd is invalid:
* First line does not match format
* First letter in commit message description is not lowercase.

CONVENTIONAL COMMITS ARE A CONSPIRACY, GIT ANARCHY IS PREFERRED

@makors makors force-pushed the turnstile-squashed branch 3 times, most recently from 0ef0870 to c664e7b Compare April 19, 2026 01:55
@makors makors force-pushed the turnstile-squashed branch from c664e7b to 33addb5 Compare April 19, 2026 02:05
@makors

makors commented Apr 19, 2026

Copy link
Copy Markdown
Contributor Author

Well good thing I wrote tests

@makors makors marked this pull request as ready for review April 19, 2026 02:10
@coveralls

Copy link
Copy Markdown

Coverage Status

coverage: 79.256% (-0.008%) from 79.264% — makors:turnstile-squashed into tjcsl:dev

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement reCAPTCHA on the Ion login page

2 participants