marty/instantadpay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sign-up code guard: honeypot, form age, per-IP + global limits, progressive icon check, burst alert

Browse Source 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
martbost
2026-09-11 06:30:03 -05:00
parent f9b198a49b
commit 159e19dcdf
7 changed files with 107 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/assets/my.js
+3 -2
View File
@@ -1610,8 +1610,9 @@
if (!cfg.emailAuth) return;
$('passCards').hidden = true;
$('magicCard').hidden = false;
const codeOpts = () => ({ honeypot: $('mcWebsite'), host: $('mcCheck') });
const start = busy($('mcSendBtn'), async () => {
const r = await api('/api/auth/email/start', { email: $('mcEmail').value });
const r = await IAP.requestCode($('mcEmail').value, codeOpts());
$('mcCodeRow').hidden = false;
$('mcVerifyBtn').hidden = false;
$('mcSendBtn').hidden = true;
@@ -1622,7 +1623,7 @@
});
$('mcSendBtn').addEventListener('click', start);
$('mcResend').addEventListener('click', busy($('mcResend'), async () => {
const r = await api('/api/auth/email/start', { email: $('mcEmail').value });
const r = await IAP.requestCode($('mcEmail').value, codeOpts());
if (r.devCode) $('mcCode').value = r.devCode;
IAP.status('Fresh code sent.', 'ok');
}));