decidim-decidim_awesome 0.12.0 → 0.12.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 29689a9ea7f9c930c3683f13c34ecf797b125dc8241ed704ca44174085d59a00
-  data.tar.gz: f3552ebb84814f2f854f7a9b9bb1f80a0d8b3739cd1fd9626c3cbc4f6a7c7a6e
+  metadata.gz: e111d7d8a993a82615ebe5876f238141d046d140d17cc2ce8a47bd57a6e4028b
+  data.tar.gz: 21012c001100d7bb1fdc7555a6650b695ba990bca5b38e0014ac78082af6f15e
 SHA512:
-  metadata.gz: a521a9f071f71436ad251a7ce20c9a7d6202fe83518e291927ce4d9affdbc138238b2e5b618b505db66882beb3af2775f90993ca501c290b7f4152990a38d456
-  data.tar.gz: 28c137dced1adb31664299f427b55257877f56b4d06041de46a0194fb14b976adf6375dad4a17063ff155031ab4ba6ff6345b4bf2066bcfa9102a3f00a7a482a
+  metadata.gz: 70df95271a2b16f3510ee8fa6549ec616f9c38963b5266291acfa8ec0bf572980af1781474be44b55ee0bd4cdff04efbfb6c135ca48bafe2676ab9d8a2ffc3c6
+  data.tar.gz: 6e75d54f61ffde030812ff30e6f4ec58b6db4d2e1ce8168f38c58921efa3bf8a648c4c5c58801a714e0740beeabb3d16df97319badab04bae70cd6171169114b

data/CHANGELOG.md

@@ -1,6 +1,39 @@
 CHANGELOG
 =========
 
+v0.12.2
+-------
+
+Compatibility:
+  - Decidim 0.29.x
+
+Features:
+  - Fix custom styles loading order
+  - Fix for awesome map no loading in a component
+  - Fix "other" options in checkbox/radio custom fields
+  - Added Mobile Menu Override
+
+v0.12.2
+-------
+
+Compatibility:
+  - Decidim 0.29.x
+
+Features:
+  - Added HashCash anti-bot mechanism
+  - Fixed multi-tenant crossover in admin accountability
+
+v0.12.1
+-------
+
+Compatibility:
+  - Decidim 0.29.x
+
+Feature:
+  - Added formBuilder languages controller to avoid external CDN
+  - Fix cache hash in the global menu override
+  - Fix crash on updating empty boxes for scoped admins
+
 v0.12.0
 -------
 Compatibility:

data/README.md

@@ -121,21 +121,8 @@ Technically, the content is stored in the database as an XML document compatible
 ![Custom fields screenshot](examples/custom-fields-2.png)
 ![Custom fields screenshot](examples/custom-fields-1.gif)
 
-Note that the custom fields are build using the jQuery library [formBuilder](https://formbuilder.online). This package is included in Decidim Awesome but the i18n translations are not. By default they are dynamically downloaded from the CDN https://cdn.jsdelivr.net/npm/formbuilder-languages@1.1.0/.
-If you wish to provide an alternative place for those files, you can configure the variable `form_builder_langs_location` in an initializer:
 
-```ruby
-# config/initializers/awesome_defaults.rb
-
-# A URL where to obtain the translations for the FormBuilder component
-# you can a custom place if you are worried about the CDN geolocation
-# Download them from https://github.com/kevinchappell/formBuilder-languages
-
-# For instance, copy them to your /public/fb_locales/ directory and set the path here:
-Decidim::DecidimAwesome.configure do |config|
-  config.form_builder_langs_location = "/fb_locales/"
-end
-```
+Translations for this feature are extracted from the [NPM formBuilder-languages](https://github.com/kevinchappell/formBuilder-languages).
 
 ##### 11.1. GraphQL types for custom fields
 
@@ -425,6 +412,19 @@ System configuration:
 ![Removing an authorization](examples/manual_verifications_2.png)
 ![Creating an authorization](examples/manual_verifications_3.png)
 
+#### 22. HashCash Anti-Bot login/registration
+
+This feature adds a HashCash-based anti-bot mechanism to the login and registration forms. HashCash is a proof-of-work system originally designed to limit email spam and denial-of-service attacks. When enabled, users must solve a computational puzzle (a "stamp") before submitting the form, making automated attacks significantly harder.
+
+The integration leverages the [ActiveHashcash](https://github.com/BaseSecrete/active_hashcash) gem to generate and verify HashCash stamps (although with some customizations). For more details on the HashCash protocol, see the [official documentation](http://www.hashcash.org/docs/hashcash.html).
+
+When this feature is active, each login or registration attempt requires a valid HashCash stamp, effectively reducing the risk of automated bot submissions.
+
+Note this feature is **disabled by default**, admins can enabled it under the "Surveys & Forms" menu in the Decidim Awesome admin dashboard.
+
+![Hashcash admin config](examples/haschcash_admin.png)
+![Hashcash public rendering](examples/hashcash_public.png)
+
 #### To be continued...
 
 We're not done! Please check the [issues](/decidim-ice/decidim-module-decidim_awesome/issues) (and participate) to see what's on our mind
@@ -567,6 +567,16 @@ can add the environment variables to the root directory of the project in a file
 named `.rbenv-vars`. If these are defined for the environment, you can omit
 defining these in the commands shown above.
 
+### Updating formBuilder languages
+
+There's a rake task to update the translations of the custom field's form builder interface:
+
+```
+bundle exec rake update_form_builder_i18n
+```
+
+This updates the `app/packs/src/vendor/form_builder_langs` folder.
+
 ### Code Styling
 
 Please follow the code styling defined by the different linters that ensure we

data/Rakefile

@@ -6,6 +6,7 @@ require "fileutils"
 def install_module(path)
   Dir.chdir(path) do
     system("bundle exec rake decidim_decidim_awesome:install:migrations")
+    system("bundle exec rake active_hashcash:install:migrations")
     system("bundle exec rake db:migrate")
   end
 end
@@ -55,3 +56,14 @@ task :development_app do
   override_webpacker_config_files("development_app")
   seed_db("development_app")
 end
+
+desc "Update languages for custom fields"
+task :update_form_builder_i18n do
+  puts "Updating languages for custom fields from formbuilder-languages NPM package..."
+  system("npm install formbuilder-languages")
+  puts "Copying files..."
+
+  Dir.glob("node_modules/formbuilder-languages/*.lang").each do |file_lang|
+    FileUtils.cp(file_lang, "app/packs/src/vendor/form_builder_langs", verbose: true)
+  end
+end

data/app/cells/concerns/decidim/decidim_awesome/global_menu_cell_override.rb

@@ -6,14 +6,26 @@ module Decidim
       extend ActiveSupport::Concern
 
       included do
+        private
+
         def cache_hash
-          [
+          @decidim_awesome_cache_hash ||= [
             "decidim/content_blocks/global_menu",
             current_organization.cache_key_with_version,
             I18n.locale,
-            awesome_config[:home_content_block_menu].to_s
+            *extra_cache_keys
           ].join(Decidim.cache_key_separator)
         end
+
+        def extra_cache_keys
+          [].tap do |array|
+            array << awesome_config[:home_content_block_menu].to_s
+            if defined?(current_user) && current_user
+              array << current_user.id
+              array << Decidim::Authorization.find_by(user: current_user)&.cache_key_with_version
+            end
+          end
+        end
       end
     end
   end

data/app/cells/concerns/decidim/decidim_awesome/proposal_l_cell_override.rb

@@ -15,10 +15,11 @@ module Decidim
         end
 
         def cache_hash
-          all_extra_fields = memoize("extra_fields")
-          extra_fields = all_extra_fields ? all_extra_fields[resource.id] : resource.extra_fields
-
-          @cache_hash ||= "#{decidim_original_cache_hash}#{Decidim.cache_key_separator}#{extra_fields&.vote_weight_totals}"
+          @decidim_awesome_cache_hash ||= begin
+            all_extra_fields = memoize("extra_fields")
+            extra_fields = all_extra_fields ? all_extra_fields[resource.id] : resource.extra_fields
+            "#{decidim_original_cache_hash}#{Decidim.cache_key_separator}#{extra_fields&.vote_weight_totals}"
+          end
         end
       end
     end

data/app/cells/decidim/decidim_awesome/voting/voting_cards_proposal/show.erb

@@ -12,9 +12,9 @@
                                   voted_for?(0) ? t("decidim.decidim_awesome.voting.voting_cards.abstained") : proposal.manifest.label_for(0),
                                   proposal_vote_path(0),
                                   link_options(0).merge({
-                                    title: t("decidim.decidim_awesome.voting.voting_cards.voting_for", proposal: sanitized_title, type: proposal.manifest.label_for(0)),
-                                    class: "button button__sm button__transparent-secondary mb-4 vote-action abstain-button #{classes_for(0)}"
-                                    }) %>
+                                                          title: t("decidim.decidim_awesome.voting.voting_cards.voting_for", proposal: sanitized_title, type: proposal.manifest.label_for(0)),
+                                                          class: "button button__sm button__transparent-secondary mb-4 vote-action abstain-button #{classes_for(0)}"
+                                                        }) %>
   <% end %>
 
   <% if voted_for_any? && !current_settings.votes_blocked? %>

data/app/cells/decidim/decidim_awesome/voting/voting_cards_proposal/vote_block_for.erb

@@ -9,7 +9,7 @@
       <span class="vote-label"><%= proposal.manifest.label_for(weight) %></span>
       <%= content_tag :svg, role: "img" do
         content_tag(:title, t("decidim.decidim_awesome.voting.voting_cards.voting_for", proposal: sanitized_title, type: proposal.manifest.label_for(weight))) +
-        content_tag(:use, "", "href" => svg_path(weight))
+          content_tag(:use, "", "href" => svg_path(weight))
       end %>
     <% end %>
   </div>

data/app/controllers/concerns/decidim/decidim_awesome/admin/maintenance_context.rb

@@ -8,34 +8,6 @@ module Decidim
 
         included do
           layout "decidim/decidim_awesome/admin/maintenance"
-          helper_method :current_view, :available_views, :present_private_data
-
-          private
-
-          def present_private_data(model)
-            PrivateDataPresenter.new(model)
-          end
-
-          def current_view
-            return params[:id] if available_views.include?(params[:id])
-
-            available_views.keys.first
-          end
-
-          def available_views
-            {
-              "private_data" => {
-                title: I18n.t("private_data", scope: "decidim.decidim_awesome.admin.menu.maintenance"),
-                icon: "spy-line",
-                path: decidim_admin_decidim_awesome.maintenance_path("private_data")
-              },
-              "checks" => {
-                title: I18n.t("checks", scope: "decidim.decidim_awesome.admin.menu.maintenance"),
-                icon: "pulse",
-                path: decidim_admin_decidim_awesome.checks_maintenance_index_path
-              }
-            }
-          end
         end
       end
     end

data/app/controllers/concerns/decidim/decidim_awesome/needs_hashcash.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+module Decidim
+  module DecidimAwesome
+    module NeedsHashcash
+      extend ActiveSupport::Concern
+
+      included do
+        include AwesomeHelpers
+        include ActiveHashcash
+
+        helper_method :awesome_hashcash_bits
+        before_action :set_hashcash_bits
+        before_action :awesome_check_hashcash, only: :create # rubocop:disable Rails/LexicallyScopedActionFilter
+      end
+
+      private
+
+      def awesome_hashcash_bits(zone)
+        return false unless awesome_config["hashcash_#{zone}".to_sym]
+
+        awesome_config["hashcash_#{zone}_bits".to_sym]
+      end
+
+      def awesome_check_hashcash
+        return unless set_hashcash_bits
+
+        check_hashcash
+      end
+
+      # Dynamically configures the gem https://github.com/BaseSecrete/active_hashcash
+      def set_hashcash_bits
+        if controller_name == "sessions"
+          ActiveHashcash.bits = awesome_hashcash_bits(:login)
+        elsif controller_name == "registrations"
+          ActiveHashcash.bits = awesome_hashcash_bits(:signup)
+        end
+      end
+    end
+  end
+end

data/app/controllers/concerns/decidim/decidim_awesome/not_found_redirect.rb

@@ -14,9 +14,9 @@ module Decidim
           return unless Decidim::User.respond_to? :awesome_admins_for_current_scope
           return unless Decidim::User.respond_to? :awesome_potential_admins
           return unless defined? current_user
-          return unless Decidim::User.awesome_potential_admins.include? current_user.id
+          return unless Decidim::User.awesome_potential_admins.include? current_user&.id
 
-          # assiging a flash message here does not work after redirection due the order of middleware in Rails
+          # assigning a flash message here does not work after redirection due the order of middleware in Rails
           # as a workaround, send a message through a get parameter
           path = "/admin/?unauthorized"
           referer = request.headers["Referer"]

data/app/controllers/decidim/decidim_awesome/admin/admin_authorizations_controller.rb

@@ -32,8 +32,8 @@ module Decidim
                 if force_verification.present?
                   create_forced_authorization
                 else
-                  message = render_to_string("callout", locals: { i18n_key: "user_not_authorized", klass: "alert" })
-                  message += render_to_string("edit", locals: { with_override: true })
+                  callout = render_to_string("callout", locals: { i18n_key: "user_not_authorized", klass: "alert" }, layout: false)
+                  message = render_to_string("edit", locals: { with_override: true, callout: })
                 end
               end
               on(:ok) do

data/app/controllers/decidim/decidim_awesome/admin/checks_controller.rb

@@ -52,10 +52,6 @@ module Decidim
         rescue ActionView::Template::Error => e
           flash.now[:alert] = "Partial [#{partial}] has thrown an error: #{e.message}"
         end
-
-        def current_view
-          "checks"
-        end
       end
     end
   end

data/app/controllers/decidim/decidim_awesome/admin/config_controller.rb

@@ -16,8 +16,9 @@ module Decidim
 
         def show
           @form = form(ConfigForm).from_params(organization_awesome_config)
+          path = main_path_for(config_var)
 
-          redirect_to decidim_admin_decidim_awesome.checks_maintenance_index_path unless config_var
+          redirect_to decidim_admin_decidim_awesome.send(path[0], *path[1]) unless path[0] == :config_path
         end
 
         def update

data/app/controllers/decidim/decidim_awesome/admin/custom_redirects_controller.rb

@@ -3,13 +3,12 @@
 module Decidim
   module DecidimAwesome
     module Admin
-      # Editing menu items
       class CustomRedirectsController < DecidimAwesome::Admin::ApplicationController
         include NeedsAwesomeConfig
         include ConfigConstraintsHelpers
 
         before_action do
-          enforce_permission_to :edit_config, :menu
+          enforce_permission_to :edit_config, :custom_redirects
         end
 
         helper ConfigConstraintsHelpers

data/app/controllers/decidim/decidim_awesome/admin/hashcash_controller.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require "decidim/decidim_awesome/version"
+
+module Decidim
+  module DecidimAwesome
+    module Admin
+      # System compatibility analyzer
+      class HashcashController < DecidimAwesome::Admin::ApplicationController
+        include NeedsAwesomeConfig
+        include MaintenanceContext
+        helper ConfigConstraintsHelpers
+
+        helper_method :stamps, :stamp, :addresses
+        before_action do
+          enforce_permission_to :edit_config, [:hashcash_login, :hashcash_signup]
+        end
+
+        def ip_addresses
+          render "ip_addresses"
+        end
+
+        private
+
+        def stamps
+          @stamps ||= ActiveHashcash::Stamp.filter_by(params).order(created_at: :desc).limit(1000)
+        end
+
+        def stamp
+          @stamp ||= ActiveHashcash::Stamp.find_by(id: params[:id])
+        end
+
+        def addresses
+          @addresses ||= ActiveHashcash::Stamp.filter_by(params).group(:ip_address).order(count_all: :desc).limit(1000).count
+        end
+      end
+    end
+  end
+end

data/app/controllers/decidim/decidim_awesome/admin/menu_hacks_controller.rb

@@ -12,7 +12,7 @@ module Decidim
         helper_method :current_items, :visibility_options, :target_options
 
         before_action do
-          enforce_permission_to :edit_config, :menu
+          enforce_permission_to :edit_config, current_menu_name
         end
 
         def index; end

data/app/controllers/decidim/decidim_awesome/admin/{maintenance_controller.rb → private_data_controller.rb}

@@ -6,7 +6,7 @@ module Decidim
   module DecidimAwesome
     module Admin
       # System compatibility analyzer
-      class MaintenanceController < DecidimAwesome::Admin::ApplicationController
+      class PrivateDataController < DecidimAwesome::Admin::ApplicationController
         include NeedsAwesomeConfig
         include MaintenanceContext
         include Decidim::Admin::Filterable
@@ -19,36 +19,36 @@ module Decidim
           enforce_permission_to :edit_config, :private_data, private_data:
         end
 
-        def show
+        def index
           respond_to do |format|
             format.json do
               render json: private_data_finder.for(params[:resources].to_s.split(",")).map { |resource| present(resource) }
             end
             format.all do
-              render :show
+              render :index
             end
           end
         end
 
-        def destroy_private_data
+        def destroy
           if private_data && private_data.total.to_i.positive?
             Decidim::ActionLogger.log("destroy_private_data", current_user, resource, nil, count: private_data.total)
 
             Lock.new(current_organization).get!(resource)
             DestroyPrivateDataJob.set(wait: 1.second).perform_later(resource)
           end
-          redirect_to decidim_admin_decidim_awesome.maintenance_path("private_data"),
-                      notice: I18n.t("destroying_private_data", scope: "decidim.decidim_awesome.admin.maintenance.private_data", title: present_private_data(resource).name)
+          redirect_to decidim_admin_decidim_awesome.private_data_path,
+                      notice: I18n.t("destroying", scope: "decidim.decidim_awesome.admin.private_data.private_data", title: present(resource).name)
         end
 
         private
 
         def resource
-          @resource ||= Component.find_by(id: params[:resource_id])
+          @resource ||= Component.find_by(id: params[:id])
         end
 
         def private_data
-          @private_data ||= present_private_data(resource) if resource
+          @private_data ||= present(resource) if resource
         end
 
         def collection
@@ -60,7 +60,7 @@ module Decidim
         end
 
         def present(resource)
-          present_private_data(resource)
+          PrivateDataPresenter.new(resource)
         end
 
         def private_data_finder

data/app/controllers/decidim/decidim_awesome/utils_controller.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Decidim
+  module DecidimAwesome
+    # Abstract component class for components without any admin controllers (only settings)
+    class UtilsController < DecidimAwesome::ApplicationController
+      def form_builder_i18n
+        lang = I18n.locale
+        folder = "app/packs/src/vendor/form_builder_langs/"
+        file = Decidim::DecidimAwesome::Engine.root.join(folder, "#{lang}.lang")
+        file = Dir[Decidim::DecidimAwesome::Engine.root.join(folder, "#{lang}-*.lang")].first unless File.exist?(file)
+        file = Decidim::DecidimAwesome::Engine.root.join(folder, "en-US.lang") unless file && File.exist?(file)
+        render plain: File.read(file)
+      end
+    end
+  end
+end

data/app/forms/concerns/decidim/decidim_awesome/proposals/proposal_form_override.rb

@@ -8,7 +8,13 @@ module Decidim
 
         included do
           alias_method :decidim_original_map_model, :map_model
-          attribute :private_body, String
+          attribute :private_body, Decidim::Attributes::RichText
+
+          if name == "Decidim::Proposals::ProposalForm"
+            # the original decidim uses CleanString, as no images are allowed for non admins
+            # The RichText attribute transforms signed_id blobs to ObjectIDs
+            attribute :body, Decidim::Attributes::RichText
+          end
 
           def map_model(model)
             decidim_original_map_model(model)

data/app/forms/decidim/decidim_awesome/admin/config_form.rb

@@ -20,6 +20,10 @@ module Decidim
         attribute :user_timezone, Boolean
         attribute :force_authorization_after_login, Array
         attribute :force_authorization_with_any_method, Boolean
+        attribute :hashcash_signup, Boolean
+        attribute :hashcash_signup_bits, Integer, default: Decidim::DecidimAwesome.hashcash_signup_bits
+        attribute :hashcash_login, Boolean
+        attribute :hashcash_login_bits, Integer, default: Decidim::DecidimAwesome.hashcash_login_bits
         translatable_attribute :force_authorization_help_text, String
         attribute :scoped_admins, Hash
         attribute :menu, [MenuForm]
@@ -49,6 +53,8 @@ module Decidim
         validates :validate_body_min_length, presence: true, numericality: { greater_than_or_equal_to: 0 }
         validates :validate_body_max_caps_percent, presence: true, numericality: { greater_than_or_equal_to: 0, less_than_or_equal_to: 100 }
         validates :validate_body_max_marks_together, presence: true, numericality: { greater_than_or_equal_to: 1 }
+        validates :hashcash_signup_bits, presence: true, numericality: { greater_than_or_equal_to: 10, less_than_or_equal_to: 50 }
+        validates :hashcash_login_bits, presence: true, numericality: { greater_than_or_equal_to: 10, less_than_or_equal_to: 50 }
         validate :force_authorization_after_login_is_valid
         # TODO: validate non general admins are here
 
@@ -57,6 +63,7 @@ module Decidim
           instance.force_authorization_after_login = instance.force_authorization_after_login.compact_blank if instance.force_authorization_after_login.present?
           instance.valid_keys = extract_valid_keys_from_params(params)
           instance.sanitize_labels!
+          instance.sanitize_arrays!
           instance
         end
 
@@ -135,6 +142,12 @@ module Decidim
           end
         end
 
+        def sanitize_arrays!
+          scoped_admins.transform_values! do |code|
+            code.is_a?(Array) ? code.compact_blank : code
+          end
+        end
+
         private
 
         def force_authorization_after_login_is_valid

data/app/helpers/decidim/decidim_awesome/admin/config_constraints_helpers.rb

@@ -8,7 +8,7 @@ module Decidim
 
         include Decidim::TranslatableAttributes
 
-        delegate :menus, :config_enabled?, to: "Decidim::DecidimAwesome::Menu"
+        delegate :menus, :main_path_for, :config_enabled?, to: "Decidim::DecidimAwesome::Menu"
 
         def check(status)
           content_tag(:span, icon(status ? "check-line" : "close-line", class: "inline-block", aria_label: status, role: "img"), class: "fill-#{status ? "success" : "alert"}")

data/app/helpers/decidim/decidim_awesome/map_helper.rb

@@ -10,7 +10,7 @@ module Decidim
       end
 
       # rubocop:disable Metrics/CyclomaticComplexity
-      # rubocop:disable Metrics/PerceivedComplexity:
+      # rubocop:disable Metrics/PerceivedComplexity
       def awesome_map_for(components, &)
         return unless map_utility_dynamic
 
@@ -57,7 +57,7 @@ module Decidim
         end
       end
       # rubocop:enable Metrics/CyclomaticComplexity
-      # rubocop:enable Metrics/PerceivedComplexity:
+      # rubocop:enable Metrics/PerceivedComplexity
 
       def step_settings
         settings_source.try(:current_settings)
@@ -71,6 +71,7 @@ module Decidim
         try(:current_component) || self
       end
 
+      # rubocop:disable Rails/HelperInstanceVariable
       def current_categories(categories)
         return @current_categories if @current_categories
 
@@ -114,6 +115,7 @@ module Decidim
           color: format("#%02x%02x%02x", r, g, b)
         )
       end
+      # rubocop:enable Rails/HelperInstanceVariable
 
       # HSV values in [0..1[
       # returns [r, g, b] values from 0 to 255

data/app/models/decidim/decidim_awesome/paper_trail_version.rb

@@ -20,7 +20,7 @@ module Decidim
         # add users that might have been completly destroyed in any organization
         relevant_user_ids += user_ids_from_object_changes - Decidim::User.select("id").where(id: user_ids_from_object_changes).pluck(:id)
 
-        role_changes.where("object_changes ~ ANY (array[?])", relevant_user_ids.map { |id| "decidim_user_id:\n- ?\n- #{id}" })
+        role_changes.where("object_changes ~ ANY (array[?])", relevant_user_ids.map { |id| "decidim_user_id:\n- ?\n- #{id}(?!\\d)" })
       }
 
       scope :in_organization, lambda { |organization|

data/app/overrides/decidim/devise/registrations/new/add_hashcash.html.erb.deface

@@ -0,0 +1,3 @@
+<!-- insert_top ".login__links" -->
+
+<%= render partial: "decidim/decidim_awesome/hashcash/hidden_field", locals: { zone: :signup } %>

data/app/overrides/decidim/devise/sessions/new/add_hashcash.html.erb.deface

@@ -0,0 +1,3 @@
+<!-- insert_top ".login__links" -->
+
+<%= render partial: "decidim/decidim_awesome/hashcash/hidden_field", locals: { zone: :login } %>

data/app/overrides/layouts/decidim/_head/add_awesome_custom_styles.html.erb.deface

@@ -0,0 +1,3 @@
+<!-- insert_after "erb[loud]:contains('content_for :header_snippets')" -->
+
+<%= render(partial: "layouts/decidim/decidim_awesome/custom_styles") if awesome_scoped_styles.present? %>

data/app/overrides/layouts/decidim/_head/add_awesome_tags.html.erb.deface

@@ -1,7 +1,5 @@
 <!-- insert_after "erb[loud]:contains('append_stylesheet_pack_tag')" -->
 
 <% append_stylesheet_pack_tag "decidim_decidim_awesome", media: "all" %>
-<%= render(partial: "layouts/decidim/decidim_awesome/custom_styles") if awesome_scoped_styles.present? %>
-
 <% append_javascript_pack_tag "decidim_decidim_awesome", defer: false %>
 <% append_javascript_pack_tag("decidim_decidim_awesome_custom_fields") if Decidim::DecidimAwesome.enabled?(:proposal_custom_fields) %>

data/app/packs/entrypoints/decidim_decidim_awesome_hashcash.js

@@ -0,0 +1,4 @@
+import Hashcash from "src/vendor/hashcash";
+
+Hashcash.setup();
+