Add anti-bot registration protection

- Custom /api/register route: honeypot, disposable email blocking, Cloudflare Turnstile verification
- Register form: honeypot hidden field, Turnstile widget (loads when NEXT_PUBLIC_TURNSTILE_SITE_KEY set)
- Install disposable-email-domains package
- Add NEXT_PUBLIC_TURNSTILE_SITE_KEY and TURNSTILE_SECRET_KEY env vars to .env.example

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-05-26 12:35:06 +05:00
parent c1c33a0619
commit 231ed083be
5 changed files with 183 additions and 8 deletions
+4
View File
@@ -12,5 +12,9 @@ S3_ACCESS_KEY=""
S3_SECRET_KEY=""
S3_REGION="eu-central"
# Cloudflare Turnstile (anti-bot защита на регистрации)
NEXT_PUBLIC_TURNSTILE_SITE_KEY=""
TURNSTILE_SECRET_KEY=""
# Kinescope (добавить при получении платного плана)
# KINESCOPE_API_KEY=""