updated gallery

resources/js/components/forum/ReplyForm.jsx

@@ -1,9 +1,12 @@
 import React, { useState, useRef, useCallback } from 'react'
 import Button from '../ui/Button'
 import RichTextEditor from './RichTextEditor'
+import TurnstileField from '../security/TurnstileField'
+import { buildBotFingerprint } from '../../lib/security/botFingerprint'
 
-export default function ReplyForm({ topicKey, prefill = '', quotedAuthor = null, csrfToken }) {
+export default function ReplyForm({ topicKey, prefill = '', quotedAuthor = null, csrfToken, captcha = {} }) {
   const [content, setContent] = useState(prefill)
+  const [captchaToken, setCaptchaToken] = useState('')
   const [submitting, setSubmitting] = useState(false)
   const [error, setError] = useState(null)
   const formRef = useRef(null)
@@ -16,16 +19,24 @@ export default function ReplyForm({ topicKey, prefill = '', quotedAuthor = null,
     setError(null)
 
     try {
+      const fingerprint = await buildBotFingerprint()
       const res = await fetch(`/forum/topic/${topicKey}/reply`, {
         method: 'POST',
         headers: {
           'Content-Type': 'application/json',
           'X-CSRF-TOKEN': csrfToken,
+          'X-Bot-Fingerprint': fingerprint,
+          'X-Captcha-Token': captchaToken,
           'Accept': 'application/json',
           'X-Requested-With': 'XMLHttpRequest',
         },
         credentials: 'same-origin',
-        body: JSON.stringify({ content: content.trim() }),
+        body: JSON.stringify({
+          content: content.trim(),
+          homepage_url: '',
+          _bot_fingerprint: fingerprint,
+          [captcha.inputName || 'cf-turnstile-response']: captchaToken,
+        }),
       })
 
       if (res.ok) {
@@ -33,9 +44,10 @@ export default function ReplyForm({ topicKey, prefill = '', quotedAuthor = null,
         window.location.reload()
       } else if (res.status === 422) {
         const json = await res.json()
-        setError(json.errors?.content?.[0] ?? 'Validation error.')
+        setError(json.errors?.content?.[0] ?? json.errors?.bot?.[0] ?? json.message ?? 'Validation error.')
       } else {
-        setError('Failed to post reply. Please try again.')
+        const json = await res.json().catch(() => ({}))
+        setError(json?.errors?.bot?.[0] ?? json?.message ?? 'Failed to post reply. Please try again.')
       }
     } catch {
       setError('Network error. Please try again.')
@@ -66,6 +78,16 @@ export default function ReplyForm({ topicKey, prefill = '', quotedAuthor = null,
       />
 
       {/* Submit */}
+      {captcha.siteKey ? (
+        <TurnstileField
+          provider={captcha.provider}
+          siteKey={captcha.siteKey}
+          scriptUrl={captcha.scriptUrl}
+          onToken={setCaptchaToken}
+          className="rounded-lg border border-white/10 bg-black/20 p-3"
+        />
+      ) : null}
+
       <div className="flex items-center justify-end">
         <Button
           type="submit"