@arnaudw38/nodebb-plugin-spam-be-gone 1.0.3 → 1.0.5

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.0.5] - 2026-02-25
+
+### Fixed
+- Fixed Turnstile not resetting after a failed login attempt when retrying on the same page.
+- Reset is now triggered after login submit if the user remains on the login page, even if the hidden Turnstile token input has already been cleared by client-side login logic.
+
+## [1.0.4] - 2026-02-25
+
+### Fixed
+- Fixed login UX regression where the Turnstile widget was resetting while typing in the username/password fields.
+- Turnstile now resets only after a login submission retry flow (failed login without page reload), not on every keystroke.
+
 ## [1.0.3] - 2026-02-25
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arnaudw38/nodebb-plugin-spam-be-gone",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Anti-spam plugin for NodeBB 4.x using Akismet, StopForumSpam API, ProjectHoneyPot, and Cloudflare Turnstile (Turnstile-only fork)",
   "main": "library.js",
   "scripts": {},

package/public/js/scripts.js

@@ -60,9 +60,10 @@ $(function () {
 				if (!document.getElementById(targetId)) {
 					return;
 				}
-				if (getCurrentTurnstileResponse()) {
-					resetTurnstileWidget(targetId);
-				}
+				// Reset unconditionally if we're still on the login page after submit.
+				// Tokens are single-use and may already have been cleared by the form logic
+				// when a login attempt fails, so checking the hidden input is unreliable.
+				resetTurnstileWidget(targetId);
 			}, delay);
 		});
 	}
@@ -82,12 +83,7 @@ $(function () {
 			.on('click.spamBeGoneTurnstileLogin', '[component="login/submit"]', function () {
 				scheduleLoginTurnstileReset(targetId);
 			})
-			.off('input.spamBeGoneTurnstileLogin change.spamBeGoneTurnstileLogin')
-			.on('input.spamBeGoneTurnstileLogin change.spamBeGoneTurnstileLogin', 'input[name="username"], input[name="password"]', function () {
-				if (document.getElementById(targetId) && getCurrentTurnstileResponse()) {
-					resetTurnstileWidget(targetId);
-				}
-			});
+			.off('input.spamBeGoneTurnstileLogin change.spamBeGoneTurnstileLogin');
 	}
 
 	function renderTurnstileIfNeeded(isLoginPage) {