Feat: Add Turnstile verification to forms

This commit is contained in:
2025-10-02 14:41:17 -07:00
parent 6c18e5b674
commit 114aa13819

View File

@@ -38,7 +38,12 @@ export async function onRequestPost({request,env}){
const user=await auth(request,env.D1_SPCHCAP); const user=await auth(request,env.D1_SPCHCAP);
if(!user)return json({error:'Unauthorized'},{status:401},request); if(!user)return json({error:'Unauthorized'},{status:401},request);
const{sub,title,link,content}=await request.json(); const body=await request.json();
const fd=new FormData();fd.append('secret',env.SEC_TURNSTILE);fd.append('response',body['cf-turnstile-response']);fd.append('remoteip',request.headers.get('CF-Connecting-IP'));
const ts=await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify',{body:fd,method:'POST'});
if(!(await ts.json()).success)return json({error:'Invalid CAPTCHA'},{status:403},request);
const{sub,title,link,content}=body;
if(!sub||!title)return json({error:'Missing fields'},{status:400},request); if(!sub||!title)return json({error:'Missing fields'},{status:400},request);
let sub_row=await env.D1_SPCHCAP.prepare('SELECT id FROM subs WHERE name=?').bind(sub).first(); let sub_row=await env.D1_SPCHCAP.prepare('SELECT id FROM subs WHERE name=?').bind(sub).first();