Verify ALTCHA before upload body parse with single-use replay store.

Run challenge TTL and replay tracking in middleware, remove the guard, and wire ScheduleModule for pruning used solutions.
2026-10-12 20:18:36 +02:00
parent 96383a7426
commit 7f99256863
15 changed files with 446 additions and 84 deletions
@@ -24,11 +24,14 @@
        "@nestjs/config": "^4.0.3",
        "@nestjs/core": "^11.0.1",
        "@nestjs/platform-express": "^11.0.1",
+        "@nestjs/schedule": "^6.1.3",
        "@nestjs/throttler": "^6.7.1",
        "@nestjs/typeorm": "^12.0.2",
        "altcha-lib": "^2.6.0",
        "class-transformer": "^0.5.1",
        "class-validator": "^0.15.1",
+        "dayjs": "^1.11.23",
+        "file-type": "^22.1.1",
        "pg": "^8.23.1",
        "reflect-metadata": "^0.2.2",
        "typeorm": "^0.3.28"