My Forum

https://www.emclub.top

nodebb-plugin-cap-captcha 2.7

Cap.js protection for NodeBB 4.x login, registration, and password-reset request.

• Login: mandatory Cap verification
• Register: mandatory Cap verification
• Password reset request (/reset): mandatory Cap verification
• No post/reply/composer protection
• Backend verification uses POST JSON { secret, response }
• Fail closed on missing token, verification failure, HTTP failure, timeout, or invalid configuration
• Frontend endpoint normalisation prevents duplicated site keys
• Widget JS is explicitly loaded by the client for auth/reset pages
• ACP uses NodeBB settings load/save and a single standard save button

2.5.2 changes

• Fixed the fatal normaliseEndpoint is not defined error that prevented widget initialisation.
• Added a self-contained frontend endpoint normaliser to the client bundle.
• Updated package/plugin version to 2.5.2.
• Kept the reset-page injection path on the native /reset form.