GrottoCenter / grottocenter-api / 30591462309

91%

Build Type

push

github

Committed by ClemRz

Commit Message

fix(auth): address code review on PR #1738

- Fix always-pass site key in docs (1x00000000000000000000AA)
- Clarify Turnstile env vars must be exported in shell, not docker/.env
- Switch req.body to req.allParams()/req.param() in sign-up controller
- Use res.badRequest() for CAPTCHA 400s, keep res.status(503) for 503
- Hoist TurnstileService.validateConfig() to top of bootstrap
- Add token length guard (>2048) before outbound Cloudflare call
- Simplify non-2xx branch in verifyToken to CAPTCHA_SERVICE_UNAVAILABLE
- Truncate honeypot log value to 200 chars
- Restructure noisy property test describe titles
- Remove README/sample.env duplication

Coverage Stats

5137 of 6176 branches covered (83.18%)

Branch coverage included in aggregate %.

9 of 13 new or added lines in 4 files covered. (69.23%)

30 existing lines in 3 files now uncovered.

9491 of 10580 relevant lines covered (89.71%)

132.77 hits per line