5 Commits

Author	SHA1	Message	Date
Thomas Lynch	d019440bc0	Move POW proof checking to POST and sign a cookie there, kinda like captcha flow, so we can do a more intensive one without it happening on every request. We just check the hmac now. ... Still TODO actually converting it to argon, but should be straightforward from this point. Another advantage of making POW check use POST is a better noscript experience. We now provide a box and "submit" button, so they don't have to mess with setting a cookie.	2022-09-23 00:26:20 +10:00
Thomas Lynch	521f9742c1	revert back to 2 thread max again because turns out firefox didnt get better, just tor limits to 1 thread anyway	2022-09-21 21:32:33 +10:00
Thomas Lynch	0af1a740ab	Make captcha submission automatic and not require clicking a "submit" form button	2022-09-18 01:41:02 +10:00
Thomas Lynch	207c3af05b	Patch some bugs in the updated challenge.js especially related to the fallback mode	2022-09-17 04:04:27 +10:00
Thomas Lynch	598790cb4f	- Fix some docker-compose issues close #14 ... - Move to new scheme with some hashing, sigs, and a random user key. close #13 - Change to sha256 rather than sha1 (temporary, but i guess its slightly more secure which is nice for now) ref #10 - Change POW output checked value - Add lib for randombytes, udpate lua sha lib - Remove outdated difficulty checks in frontend (was hardcoded 0 anyway) and since algo change is coming soon, there is no need to keep it	2022-09-17 02:45:27 +10:00