about summary refs log tree commit diff
path: root/app/services/authorize_follow_service.rb
diff options
context:
space:
mode:
authorClaire <claire.github-309c@sitedethib.com>2022-01-24 19:06:19 +0100
committerClaire <claire.github-309c@sitedethib.com>2022-01-24 21:22:13 +0100
commit1b493c9fee954b5bd4c4b00f9f945a5d97e2d699 (patch)
tree902087cb4c658f83570db7aa7ae08d324e1a94ef /app/services/authorize_follow_service.rb
parente58e0eb9aa375b1107b207e8229a2142c4edc0b8 (diff)
Add optional hCaptcha support
Fixes #1649

This requires setting `HCAPTCHA_SECRET_KEY` and `HCAPTCHA_SITE_KEY`, then
enabling the admin setting at
`/admin/settings/edit#form_admin_settings_captcha_enabled`

Subsequently, a hCaptcha widget will be displayed on `/about` and
`/auth/sign_up` unless:
- the user is already signed-up already
- the user has used an invite link
- the user has already solved the captcha (and registration failed for another
  reason)

The Content-Security-Policy headers are altered automatically to allow the
third-party hCaptcha scripts on `/about` and `/auth/sign_up` following the same
rules as above.
Diffstat (limited to 'app/services/authorize_follow_service.rb')
0 files changed, 0 insertions, 0 deletions