feat: add CAPTCHA protection to subscribe form (#729) - #803

Open

otherwiseGG wants to merge 21 commits into

rajnandan1:mainfrom

otherwiseGG:729-integrate-captcha

Commits on Aug 5, 2026

feat: add captcha site-data keys and verification controller
Benjamin Thiele
committed
26763d3
feat: add public captcha-config.json endpoint
Benjamin Thiele
committed
79acfdc
fix: require captcha verification before sending subscribe OTP email (#729)
Benjamin Thiele
committed
4c9bc0b

Commits on Aug 6, 2026

feat: add Captcha.svelte widget
Benjamin Thiele
committed
651c5f8
feat: gate subscribe form's Continue button on captcha verification
Benjamin Thiele
committed
8e216fc
feat: add Captcha Providers admin page (shared panel extracted from Analytics Providers)
Benjamin Thiele
committed
10ba6d3
fix: scope api-server auto-loader glob to known handler filenames
Benjamin Thiele
committed
e58433c
feat: add real provider logos to Captcha Providers page
Benjamin Thiele
committed
b056903
fix: trim transparent padding from captcha provider logos
Benjamin Thiele
committed
9f00c14
fix: gate captcha widget render on provider .ready() when available
Benjamin Thiele
committed
9b6e408
fix: keep subscribe dialog open when captcha challenge overlay is clicked
Benjamin Thiele
committed
0d75635
fix: re-enable pointer-events on captcha challenge overlays under body's scroll-lock
Benjamin Thiele
committed
8b8d20c
docs: add Captcha docs page, match Captcha Providers intro to Analytics style
Benjamin Thiele
committed
d86f6b8
fix: fail closed on misconfigured captcha, add verify request timeout
Benjamin Thiele
committed
0b745e0
fix: widen captchaToken type to allow null
Benjamin Thiele
committed
9ea7149
fix: reset captcha widget after rejected token, keep required state on load error
Benjamin Thiele
committed
ff2a6bf
fix: surface the server's specific error message on failed subscribe login
Benjamin Thiele
committed
07de0a3
fix: loadScript waits for an in-flight script load instead of resolving early
Benjamin Thiele
committed
996dc10
logic fixes
Benjamin Thiele
committed
8521b7d
fix: remove failed script tag so a captcha load retry doesn't hang forever
Benjamin Thiele
committed
644c9e4
fix: send user back to solve a fresh captcha on Resend instead of replaying consumed token
Benjamin Thiele
committed
3d0edb5

Navigation Menu

Uh oh!

feat: add CAPTCHA protection to subscribe form (#729) - #803

feat: add CAPTCHA protection to subscribe form (#729)#803
otherwiseGG wants to merge 21 commits into
rajnandan1:mainfrom
otherwiseGG:729-integrate-captcha

Commits on Aug 5, 2026

feat: add captcha site-data keys and verification controller

feat: add public captcha-config.json endpoint

fix: require captcha verification before sending subscribe OTP email (#729)

Commits on Aug 6, 2026

feat: add Captcha.svelte widget

feat: gate subscribe form's Continue button on captcha verification

feat: add Captcha Providers admin page (shared panel extracted from Analytics Providers)

fix: scope api-server auto-loader glob to known handler filenames

feat: add real provider logos to Captcha Providers page

fix: trim transparent padding from captcha provider logos

fix: gate captcha widget render on provider .ready() when available

fix: keep subscribe dialog open when captcha challenge overlay is clicked

fix: re-enable pointer-events on captcha challenge overlays under body's scroll-lock

docs: add Captcha docs page, match Captcha Providers intro to Analytics style

fix: fail closed on misconfigured captcha, add verify request timeout

fix: widen captchaToken type to allow null

fix: reset captcha widget after rejected token, keep required state on load error

fix: surface the server's specific error message on failed subscribe login

fix: loadScript waits for an in-flight script load instead of resolving early

logic fixes

fix: remove failed script tag so a captcha load retry doesn't hang forever

fix: send user back to solve a fresh captcha on Resend instead of replaying consumed token