safe-global / safe-client-gateway / 22767621623

90%

Build Type

push

github

Committed by web-flow

Commit Message

feat(captcha): add Cloudflare Turnstile verification for protected endpoints (#2892)

* feat(captcha): add Cloudflare Turnstile verification for protected endpoints

- Add CaptchaModule with Turnstile token verification service
- Add CaptchaGuard to protect sensitive endpoints (e.g., owners controller)
- Add Turnstile configuration (secret key) to application config
- Update .env.sample with Turnstile environment variables

* add captcha config

* add PSDX header

* fix comment and add test

* add missing SPDX

* fix e2e

* load and store Captcha config at service init

* use asError

* type safety

* throw an error if catpcha is enabled but no secret key is configured

* Use log type constant

* TURNSTILE_SECRET_KEY -> CAPTCHA_SECRET_KEY

* load catpcha config in the constructor

* improve test "should not include remoteip when not provided"

* add comment x-forwarded-for is spoofable

* missing SPDX header

* remove empty beforeEach

---------

Co-authored-by: Pooya Raki <Pooya.raki@gmail.com>

Run Details

3024 of 3824 branches covered (79.08%)

Branch coverage included in aggregate %.

59 of 60 new or added lines in 9 files covered. (98.33%)

1 existing line in 1 file now uncovered.

14559 of 15832 relevant lines covered (91.96%)

565.35 hits per line