chris 08ac545567 Harden ALTCHA: raise cost and add expiration ...

cost 100 → 50000: was solvable in milliseconds by a bot, now takes
~1-2s in a real browser, making mass automation impractical.

expiresAt 10min: embeds expiry in the HMAC-signed challenge so the
server rejects replayed tokens without needing to store seen challenges.

ALTCHA_HMAC_KEY must be set to a strong secret in production.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-13 19:11:19 -04:00

estore

Fix store-status route always returning 401

2026-06-11 14:53:39 -04:00

main-site

Harden ALTCHA: raise cost and add expiration

2026-06-13 19:11:19 -04:00

nginx

Fix Apple Pay verification file — serve directly from nginx

2026-05-29 06:47:06 -04:00

osrm

Major overhaul: shared nav, admin improvements, email enhancements, routing fixes

2026-04-14 21:14:06 -04:00

public/.well-known

Add Google Pay and Apple Pay support; fix catalog category filter

2026-05-28 17:01:29 -04:00

.env.example

Contact form: split name into first/last, add ntfy notification

2026-06-07 00:32:06 -04:00

.gitignore

Major overhaul: shared nav, admin improvements, email enhancements, routing fixes

2026-04-14 21:14:06 -04:00

docker-compose.yml

Add ALTCHA proof-of-work spam protection to contact form

2026-06-11 14:23:42 -04:00

Description

No description provided

186 MiB

Languages

TypeScript 49.5%

JavaScript 22%

HTML 12.1%

CSS 8.5%

Shell 7.2%

Other 0.7%