search

danpros / htmly

Simple and fast databaseless PHP blogging platform, and Flat-File CMS
https://www.htmly.com
GNU General Public License v2.0
1.01k stars 258 forks source link

Added Cloudflare Turnstile as alternative to Google reCAPTCHA #763

Closed KuJoe closed 1 month ago

KuJoe commented 1 month ago

Added the option to select Cloudflare's Turnstile instead of Google's reCAPTCHA for the login page due to it's less intrusive usage and better accessibility options.

@danpros this changes some of the variable names in the config.ini file, how would these variable names be updated for users who do the automatic update?

image image

danpros commented 1 month ago

Thank you!

how would these variable names be updated for users who do the automatic update?

They need to re configure it again, but it's fine. You need to remove the old config from configList.json so the old config will automatically show up in config/custom, they can copy paste it from there.

danpros commented 1 month ago

It would be great if we have new site wide config to disable MFA feature so we can hide those MFA input from login page.

KuJoe commented 1 month ago

It would be great if we have new site wide config to disable MFA feature so we can hide those MFA input from login page.

Good idea, PR added.

In the future I will go through and find a better solution for handling MFA so it only prompts users with it enabled and only after they've authenticated with username and password, but I didn't want to rewrite the whole login process so this current implementation was the easiest solution for now.

danpros commented 1 month ago

Please, go ahead. You can go crazy with htmly but please make it as simple as possible. Performance, security, and simplicity is the key.