lato 3.13.21 → 3.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90b71b8a0c1c7318aacd0e31a12e01f5ebf87aa911acc9fb7e5ddd88e49659a9
-  data.tar.gz: dca7d922ea31f0cacc7cdbb1bfe6638b9bbd0c1e9a0aab182935b505b7e6e4f1
+  metadata.gz: 233b692cf8380c236b7d1158c706e2224f278eb4b60ab4092cb68dd090a3097c
+  data.tar.gz: 575e8f7f08d126e54aae370ec4586485fda1fa328a8a81f94d41e41c07b9b4ca
 SHA512:
-  metadata.gz: 520f74499026901c037812a4fa85b01c662853f798165f9dc56402854e31ef61615fadbb2effb7bfa88cd68f897e89ac1b833a2bdf8ac73a4b5f0c59a0ecd548
-  data.tar.gz: 0d8347a9871e50e95134f719b8ef57e9237614002be2386fa3890fa7e9779c762a1e11430b0b62ef181c71627d126fb852caf4229183bb748356a8effc004ef7
+  metadata.gz: 9e0141067185a425d6baf7801fd7123c65e2e085d9e5cb48bd2d29501c4b55bab25dc935e0029bb6537e4f30605b5df4e03d12f741c80bd4c2c5fed42fc01b1e
+  data.tar.gz: '088a0dcaa20b45d8e379f9990ff53fc151b01b064a4a3920a4a09739951d14eada47f3f1503a583515f144fca04c7928631c062032a475d5e445f0de42721c05'

data/app/assets/javascripts/lato/controllers/lato_hcaptcha_controller.js

@@ -0,0 +1,22 @@
+import { Controller } from "@hotwired/stimulus"
+
+export default class extends Controller {
+  connect() {
+    this.loadHCaptcha()
+  }
+
+  loadHCaptcha() {
+    if (window.hcaptcha) {
+      window.hcaptcha.render(this.element)
+    } else {
+      const script = document.createElement('script')
+      script.src = 'https://js.hcaptcha.com/1/api.js?onload=hcaptchaOnLoad&render=explicit'
+      script.async = true
+      script.defer = true
+      window.hcaptchaOnLoad = () => {
+        window.hcaptcha.render(this.element)
+      }
+      document.head.appendChild(script)
+    }
+  }
+}

data/app/assets/stylesheets/lato/application.scss

@@ -50,7 +50,7 @@ main {
   &.layout_sidebar {
     width: calc(100% - 280px);
 
-    @media screen and (max-width: 768px) {
+    @media screen and (max-width: 1024px) {
       width: 100%;
     }
   }
@@ -86,7 +86,7 @@ main, aside {
   border-radius: 50%;
 }
 
-@media screen and (max-width: 768px) {
+@media screen and (max-width: 1024px) {
   aside {
     position: fixed;
     bottom: 0;

data/app/controllers/lato/authentication_controller.rb

@@ -82,6 +82,7 @@ module Lato
 
     def signup_action
       @user = Lato::User.new(registration_params)
+      return unless verify_hcaptcha(:signup)
 
       respond_to do |format|
         if @user.signup(ip_address: request.remote_ip, user_agent: request.user_agent)
@@ -265,5 +266,43 @@ module Lato
 
       respond_to_with_not_found
     end
+
+    def verify_hcaptcha(render_key)
+      return true unless Lato.config.hcaptcha_site_key && Lato.config.hcaptcha_secret
+
+      # Per compatibilità con i vari endpoint, istanzia @user se non esiste
+      @user ||= Lato::User.new
+
+      hcaptcha_response = params["h-captcha-response"]
+      if hcaptcha_response.blank?
+        @user.errors.add(:base, "hCaptcha response is missing")
+        respond_to do |format|
+          format.html { render render_key, status: :unprocessable_entity }
+          format.json { render json: @user.errors, status: :unprocessable_entity }
+        end
+        return false
+      end
+
+      require 'net/http'
+      require 'uri'
+      require 'json'
+      uri = URI.parse("https://hcaptcha.com/siteverify")
+      response = Net::HTTP.post_form(uri, {
+        "secret" => Lato.config.hcaptcha_secret,
+        "response" => hcaptcha_response,
+        "remoteip" => request.remote_ip
+      })
+      result = JSON.parse(response.body)
+      unless result["success"]
+        @user.errors.add(:base, "hCaptcha verification failed")
+        respond_to do |format|
+          format.html { render render_key, status: :unprocessable_entity }
+          format.json { render json: @user.errors, status: :unprocessable_entity }
+        end
+        return false
+      end
+
+      true
+    end
   end
 end

data/app/views/lato/authentication/_form-signup.html.erb

@@ -10,6 +10,8 @@ user ||= Lato::User.new
     
     <%= render 'lato/authentication/fields-registration', form: form %>
 
+    <%= render 'lato/authentication/hcaptcha' %>
+
     <div class="d-flex justify-content-end">
       <%= lato_form_submit form, I18n.t('lato.signup') %>
     </div>

data/app/views/lato/authentication/_hcaptcha.html.erb

@@ -0,0 +1,5 @@
+<% if Lato.config.hcaptcha_site_key && Lato.config.hcaptcha_secret %>
+  <div class="mb-3 d-flex justify-content-center">
+  <div class="h-captcha" data-controller="lato-hcaptcha" data-sitekey="<%= Lato.config.hcaptcha_site_key %>"></div>
+  </div>
+<% end %>

data/lib/lato/config.rb

@@ -12,6 +12,9 @@ module Lato
     # Authentication configs
     attr_accessor :auth_disable_signup, :auth_disable_recover_password, :auth_disable_web3, :auth_disable_authenticator
 
+    # Hcaptcha configs
+    attr_accessor :hcaptcha_site_key, :hcaptcha_secret
+
     # Assets configs
     attr_accessor :assets_stylesheet_entry
     attr_accessor :assets_importmap_entry
@@ -40,6 +43,9 @@ module Lato
       @auth_disable_recover_password = false
       @auth_disable_web3 = false
       @auth_disable_authenticator = false
+      
+      @hcaptcha_site_key = nil
+      @hcaptcha_secret = nil
 
       @assets_stylesheet_entry = 'application'
       @assets_importmap_entry = 'application'

data/lib/lato/version.rb

@@ -1,3 +1,3 @@
 module Lato
-  VERSION = "3.13.21"
+  VERSION = "3.14.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: lato
 version: !ruby/object:Gem::Version
-  version: 3.13.21
+  version: 3.14.0
 platform: ruby
 authors:
 - Gregorio Galante
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-07-29 00:00:00.000000000 Z
+date: 2025-08-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -162,6 +162,7 @@ files:
 - app/assets/javascripts/lato/controllers/lato_feedback_controller.js
 - app/assets/javascripts/lato/controllers/lato_form_controller.js
 - app/assets/javascripts/lato/controllers/lato_guide_controller.js
+- app/assets/javascripts/lato/controllers/lato_hcaptcha_controller.js
 - app/assets/javascripts/lato/controllers/lato_hello_controller.js
 - app/assets/javascripts/lato/controllers/lato_index_controller.js
 - app/assets/javascripts/lato/controllers/lato_input_autocomplete2_controller.js
@@ -211,6 +212,7 @@ files:
 - app/views/lato/authentication/_form-update-password.html.erb
 - app/views/lato/authentication/_form-verify-email.html.erb
 - app/views/lato/authentication/_form-web3-signin.html.erb
+- app/views/lato/authentication/_hcaptcha.html.erb
 - app/views/lato/authentication/accept_invitation.html.erb
 - app/views/lato/authentication/authenticator.html.erb
 - app/views/lato/authentication/recover_password.html.erb