Security limits - Githubissues

franklindyer commented 6 months ago

Fixes #44 Fixes #43 Fixes #11

The following functionality has been added:

captcha protection has been added to the account creation form (it's an invisible captcha, no user interaction required)
a minimum wait time is now enforced on certain user actions, e.g. post writing, profile updating, comment writing etc.
sessions now expire after 30 minutes max

Notice that the docker run command is now difference, since the captcha site and server keys must now be included as environment variables. @altheaden

altheaden commented 6 months ago

I tested the captcha (by creating a new account) and the wait time (by attempting to update my status quickly), and it worked as expected. I'll trust that you tested the session timeouts and merge this now.

franklindyer commented 6 months ago

Fixed. Merge when ready!

franklindyer / agora-app

Security limits #52