signup: Cap proof-of-work captcha (embedded capjs-core, self-hosted assets) #50

Nytt ärende

Stängd

öppnade 2026-07-17 16:35:08 +00:00 av supernaut · 0 kommentarer

supernaut kommenterad

2026-07-17 16:35:08 +00:00

Ägare

Part of the Open registration epic (bitborg-docs#27; milestone "Open registration"). ADR 0029.

Embed Cap (PoW captcha, Apache-2.0) via capjs-core — NOT the standalone server (no new containers). POST /api/captcha/challenge + /api/captcha/redeem; signup requires a valid single-use cap-token. Widget cap-widget bundled from npm with SELF-HOSTED wasm + pako (CAP_CUSTOM_WASM_URL/CAP_PAKO_URL) — zero third-party browser requests, strict CSP intact. CAP_SECRET env (podman secret). sv/en labels. Risk noted: single-maintainer upstream; pinned + Renovate-tracked.

Part of the Open registration epic (bitborg-docs#27; milestone "Open registration"). ADR 0029. Embed Cap (PoW captcha, Apache-2.0) via `capjs-core` — NOT the standalone server (no new containers). `POST /api/captcha/challenge` + `/api/captcha/redeem`; signup requires a valid single-use `cap-token`. Widget `cap-widget` bundled from npm with SELF-HOSTED wasm + pako (`CAP_CUSTOM_WASM_URL`/`CAP_PAKO_URL`) — zero third-party browser requests, strict CSP intact. `CAP_SECRET` env (podman secret). sv/en labels. Risk noted: single-maintainer upstream; pinned + Renovate-tracked.

supernaut lade till etiketterna

area/security

area/web

ready-for-implementation

type

feature

2026-07-17 16:35:27 +00:00

supernaut lade till detta till projektet Bitborg Web

2026-07-17 16:35:32 +00:00

supernaut lade till denna till milstolpe Open registration

2026-07-17 16:35:54 +00:00

supernaut refererade till detta ärende från bitborg/bitborg-docs