1
0
Fork 0
mirror of https://github.com/mCaptcha/mCaptcha.git synced 2025-03-30 21:23:29 +03:00
mCaptcha/db/db-sqlx-postgres/src
realaravinth 7d0e4c6be4
fix: prevent sitekey abuse with account secret authentication for access token validation
SUMMARY
    At present, sitekey can be abused by installing it on a third-party
    site as verifying the access token returned from CAPTCHA validation
    doesn't require any authentication.

    This fix uses account secret authentication to verify access tokens

credits: by @gusted
2022-07-22 19:44:35 +05:30
..
errors.rs feat: implement accountnotfound and captcha notfound err vals for sqlx postgres 2022-05-13 19:09:00 +05:30
get_all_unread_notifications.sql feat: impl traits to add, get and mark read notifications for sqlx 2022-05-26 19:32:16 +05:30
lib.rs fix: prevent sitekey abuse with account secret authentication for access token validation 2022-07-22 19:44:35 +05:30
mark_notification_read.sql feat: impl traits to add, get and mark read notifications for sqlx 2022-05-26 19:32:16 +05:30
tests.rs feat: conditional SQL statements logging for db-sqlx-postgres 2022-05-30 15:48:54 +05:30