From 5e6b201336e7567846ab42c4da2671484124845d Mon Sep 17 00:00:00 2001
From: chris <chris@chrisedwards.tech>
Date: Fri, 12 Jun 2026 09:20:17 -0400
Subject: [PATCH] Add Cache-Control: no-store to ALTCHA challenge endpoint

---
 main-site/server.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/main-site/server.js b/main-site/server.js
index c1b47b0..3320ea2 100644
--- a/main-site/server.js
+++ b/main-site/server.js
@@ -102,6 +102,7 @@ apiRouter.post('/update-status', requireAuth, (req, res) => {
 });
 
 apiRouter.get('/altcha', async (req, res) => {
+    res.setHeader('Cache-Control', 'no-store');
     try {
         const challenge = await createChallenge({
             algorithm: 'SHA-256',