safe-global / safe-client-gateway / 22767621623 / 1

87%

main: 87%

push

github

feat(captcha): add Cloudflare Turnstile verification for protected endpoints (#2892)

* feat(captcha): add Cloudflare Turnstile verification for protected endpoints

- Add CaptchaModule with Turnstile token verification service
- Add CaptchaGuard to protect sensitive endpoints (e.g., owners controller)
- Add Turnstile configuration (secret key) to application config
- Update .env.sample with Turnstile environment variables

* add captcha config

* add PSDX header

* fix comment and add test

* add missing SPDX

* fix e2e

* load and store Captcha config at service init

* use asError

* type safety

* throw an error if catpcha is enabled but no secret key is configured

* Use log type constant

* TURNSTILE_SECRET_KEY -> CAPTCHA_SECRET_KEY

* load catpcha config in the constructor

* improve test "should not include remoteip when not provided"

* add comment x-forwarded-for is spoofable

* missing SPDX header

* remove empty beforeEach

---------

Co-authored-by: Pooya Raki <Pooya.raki@gmail.com>

2282 of 4047 branches covered (56.39%)

Branch coverage included in aggregate %.

25753 of 31205 relevant lines covered (82.53%)

224.64 hits per line