Jakub Zych 597c79bae7 feat(19.3-02): Cloudflare Turnstile verification as turnstile:open|closed middleware ...

- bouncer: Turnstile.Verify posts secret/response/remoteip to siteverify with
  a 5 s bound and PHP's open and closed modes (503 unconfigured in production,
  422 on a missing, rejected or overlong token, an error or a timeout); errors
  never carry the secret or the token
- bouncer: Turnstile.Middleware reads the token from the query, a JSON body or
  a form body, restores the body and writes refusals through a published
  TurnstileWriter or neutral JSON
- surf: factory turnstile:open|closed from turnstile.secret/turnstile.field
  (a published *bouncer.Turnstile wins), client IP with trusted proxies; any
  other param fails boot
- docs: Turnstile section, middleware table, README rows

2026-10-15 17:54:58 +02:00

..

architecture

feat(19.3-01): share rate limits across instances through cooler's Redis store

2026-10-15 17:35:05 +02:00

backend

feat(18.1-01): task 4 flat reorder in the admin SPA

2026-10-14 16:05:10 +02:00

console

feat(16.3-01): admin:token CLI, party.Activated, READMEs and docs

2026-10-11 01:55:07 +02:00

database

feat(13-01): add the prohibited rule and dated-download and notification masks

2026-10-03 06:32:46 +02:00

examples/blog

fix(16.3): refresh CSRF coverage golden and blog scaffold layout

2026-10-11 13:53:31 +02:00

plugins

fix(17): CR-01 ignore an item URL pattern override that is not a path

2026-10-12 21:25:30 +02:00

services

feat(19.3-02): Cloudflare Turnstile verification as turnstile:open|closed middleware

2026-10-15 17:54:58 +02:00

setup

feat(19.3-01): add cooler.Cache with otter memory and Redis drivers

2026-10-15 17:40:23 +02:00

index.md

docs(architecture): add performance and scaling page compared to PHP-FPM

2026-10-01 19:20:46 +02:00

site.yaml

docs(14.3-03): document summer new and the one-command start

2026-10-08 12:08:35 +02:00