From a5f20439bf3817febc041f727ca5e909be07d0ed Mon Sep 17 00:00:00 2001
From: Patrick Britton <admin@pbritton.dev>
Date: Mon, 16 Feb 2026 23:42:20 -0600
Subject: [PATCH] fix: correct ALTCHA CreateChallenge API call to use
 ChallengeOptions struct

---
 go-backend/internal/services/altcha_service.go | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/go-backend/internal/services/altcha_service.go b/go-backend/internal/services/altcha_service.go
index 1ffeb94..e9f3670 100644
--- a/go-backend/internal/services/altcha_service.go
+++ b/go-backend/internal/services/altcha_service.go
@@ -49,8 +49,14 @@ func (s *AltchaService) VerifyToken(token, remoteIP string) (*AltchaResponse, er
 // GenerateChallenge creates a new ALTCHA challenge using the official library
 func (s *AltchaService) GenerateChallenge() (map[string]interface{}, error) {
 	// Generate challenge using official ALTCHA library
-	// Parameters: hmacKey, maxNumber (difficulty), saltLength, algorithm, expiresInSeconds
-	challenge, err := altcha.CreateChallenge(s.secretKey, 100000, 12, "SHA-256", 300)
+	options := altcha.ChallengeOptions{
+		Algorithm:  altcha.AlgorithmSHA256,
+		MaxNumber:  100000,
+		SaltLength: 12,
+		HMACKey:    s.secretKey,
+	}
+
+	challenge, err := altcha.CreateChallenge(options)
 	if err != nil {
 		return nil, err
 	}