Optional Turnstile CAPTCHA for unauthenticated email-sending API actions - #347

Merged

devondragon merged 14 commits into

mainfrom

feature/issue-346-captcha

Aug 12, 2026

Commits on Aug 9, 2026

feat: add optional ds-spring-cf-turnstile dependency and captcha config properties (#346)
devondragon
committed
3add383
feat: add CaptchaService SPI and Turnstile adapter (#346)
devondragon
committed
60b276b
feat: fail closed on unexpected Turnstile errors in captcha adapter (#346)
devondragon
committed
2c42d39
feat: add captcha validation interceptor for email-sending API actions (#346)
devondragon
committed
59e0d86
feat: auto-configure captcha with fail-closed startup validation (#346)
devondragon
committed
f7c8d3b
test: integration coverage for captcha protection and per-action toggles (#346)
devondragon
committed
b62c5d8
test: drain async mail executor before captcha reject-path assertions (#346)
devondragon
committed
4d26b21
feat: expose captchaSiteKey model attribute for consumer templates (#346)
devondragon
committed
5c02b3f
docs: document captcha configuration and client contract (#346)
devondragon
committed
ae8c84f
docs: correct disabled-state bean registration wording (#346)
devondragon
committed
92a85b8
fix: enforce captcha on path variants to close matcher-mismatch bypass (#346)
devondragon
committed
3ca7026
style: reindent captcha SPI/adapter to 4 spaces and drop unused import (#346)
devondragon
committed
36c647a

Commits on Aug 12, 2026