2 Commits

Author	SHA1	Message	Date
admins	8240db5d22	Make registration errors informative ... - Backend: explicitly return 409 EMAIL_TAKEN when the email already exists, instead of Better Auth's silent 200 (common after migration). - Frontend: split error handling — network failure, non-JSON body (502/proxy), and meaningful server errors get distinct messages; the "email already registered" case shows login / reset-password links instead of a generic "connection error". Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-12 13:20:56 +05:00
admins	231ed083be	Add anti-bot registration protection ... - Custom /api/register route: honeypot, disposable email blocking, Cloudflare Turnstile verification - Register form: honeypot hidden field, Turnstile widget (loads when NEXT_PUBLIC_TURNSTILE_SITE_KEY set) - Install disposable-email-domains package - Add NEXT_PUBLIC_TURNSTILE_SITE_KEY and TURNSTILE_SECRET_KEY env vars to .env.example Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-26 12:35:06 +05:00