patrick/sojorn
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Fix: skip Turnstile when no token provided (IP access before DNS)

Browse source
This commit is contained in:
Patrick Britton 2026-02-06 10:29:55 -06:00
parent 29772fa1e4
commit de5ad23763
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
go-backend/internal/handlers/admin_handler.go
View file

@ -66,8 +66,8 @@ func (h *AdminHandler) AdminLogin(c *gin.Context) {
} }
req.Email = strings.ToLower(strings.TrimSpace(req.Email)) req.Email = strings.ToLower(strings.TrimSpace(req.Email))
// Verify Turnstile token (invisible mode) // Verify Turnstile token (invisible mode) — only if both secret and token are present
if h.turnstileSecret != "" { if h.turnstileSecret != "" && req.TurnstileToken != "" {
turnstileService := services.NewTurnstileService(h.turnstileSecret) turnstileService := services.NewTurnstileService(h.turnstileSecret)
remoteIP := c.ClientIP() remoteIP := c.ClientIP()
turnstileResp, err := turnstileService.VerifyToken(req.TurnstileToken, remoteIP) turnstileResp, err := turnstileService.VerifyToken(req.TurnstileToken, remoteIP)