eightequal/AstralRinth
1
0
Fork 0
forked from didirus/AstralRinth
Code Pull Requests Activity

enh(labrinth): disable hCaptcha verification when secret is unset (#3544)

Browse Source
This commit is contained in:
Alejandro González
2025-04-21 17:42:17 +02:00
committed by GitHub
parent f695fe0ee7
commit 068711e7a9
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
apps/labrinth/src/util/captcha.rs
View File

@@ -8,6 +8,13 @@ pub async fn check_hcaptcha(
req: &HttpRequest,
challenge: &str,
) -> Result<bool, ApiError> {
let secret = dotenvy::var("HCAPTCHA_SECRET")?;
if secret.is_empty() || secret == "none" {
tracing::info!("hCaptcha secret not set, skipping check");
return Ok(true);
}
let conn_info = req.connection_info().clone();
let ip_addr = if parse_var("CLOUDFLARE_INTEGRATION").unwrap_or(false) {
if let Some(header) = req.headers().get("CF-Connecting-IP") {
@@ -30,7 +37,6 @@ pub async fn check_hcaptcha(
let mut form = HashMap::new();
let secret = dotenvy::var("HCAPTCHA_SECRET")?;
form.insert("response", challenge);
form.insert("secret", &*secret);
form.insert("remoteip", ip_addr);