safe-global / safe-client-gateway / 22767621623 / 2

90%

main: 90%

push

github

feat(captcha): add Cloudflare Turnstile verification for protected endpoints (#2892)

* feat(captcha): add Cloudflare Turnstile verification for protected endpoints

- Add CaptchaModule with Turnstile token verification service
- Add CaptchaGuard to protect sensitive endpoints (e.g., owners controller)
- Add Turnstile configuration (secret key) to application config
- Update .env.sample with Turnstile environment variables

* add captcha config

* add PSDX header

* fix comment and add test

* add missing SPDX

* fix e2e

* load and store Captcha config at service init

* use asError

* type safety

* throw an error if catpcha is enabled but no secret key is configured

* Use log type constant

* TURNSTILE_SECRET_KEY -> CAPTCHA_SECRET_KEY

* load catpcha config in the constructor

* improve test "should not include remoteip when not provided"

* add comment x-forwarded-for is spoofable

* missing SPDX header

* remove empty beforeEach

---------

Co-authored-by: Pooya Raki <Pooya.raki@gmail.com>

2129 of 3997 branches covered (53.26%)

Branch coverage included in aggregate %.

16916 of 29422 relevant lines covered (57.49%)

65.96 hits per line