feat: add captcha-backed forum security hardening
This commit is contained in:
@@ -35,7 +35,7 @@ Route::middleware(['guest', 'normalize.username'])->group(function () {
|
||||
->name('register.notice');
|
||||
|
||||
Route::post('register', [RegisteredUserController::class, 'store'])
|
||||
->middleware(['throttle:register-ip', 'throttle:register-ip-daily']);
|
||||
->middleware(['throttle:register-ip', 'throttle:register-ip-daily', 'forum.security.firewall:register', 'forum.bot.protection:register']);
|
||||
|
||||
Route::post('register/resend-verification', [RegisteredUserController::class, 'resendVerification'])
|
||||
->middleware('throttle:register')
|
||||
@@ -47,7 +47,8 @@ Route::middleware(['guest', 'normalize.username'])->group(function () {
|
||||
Route::get('login', [AuthenticatedSessionController::class, 'create'])
|
||||
->name('login');
|
||||
|
||||
Route::post('login', [AuthenticatedSessionController::class, 'store']);
|
||||
Route::post('login', [AuthenticatedSessionController::class, 'store'])
|
||||
->middleware(['forum.security.firewall:login', 'forum.bot.protection:login']);
|
||||
|
||||
Route::get('forgot-password', [PasswordResetLinkController::class, 'create'])
|
||||
->name('password.request');
|
||||
|
||||
Reference in New Issue
Block a user