@arnaudw38/nodebb-plugin-spam-be-gone 1.0.4 → 1.0.5

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.0.5] - 2026-02-25
+
+### Fixed
+- Fixed Turnstile not resetting after a failed login attempt when retrying on the same page.
+- Reset is now triggered after login submit if the user remains on the login page, even if the hidden Turnstile token input has already been cleared by client-side login logic.
+
 ## [1.0.4] - 2026-02-25
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arnaudw38/nodebb-plugin-spam-be-gone",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Anti-spam plugin for NodeBB 4.x using Akismet, StopForumSpam API, ProjectHoneyPot, and Cloudflare Turnstile (Turnstile-only fork)",
   "main": "library.js",
   "scripts": {},

package/public/js/scripts.js

@@ -60,9 +60,10 @@ $(function () {
 				if (!document.getElementById(targetId)) {
 					return;
 				}
-				if (getCurrentTurnstileResponse()) {
-					resetTurnstileWidget(targetId);
-				}
+				// Reset unconditionally if we're still on the login page after submit.
+				// Tokens are single-use and may already have been cleared by the form logic
+				// when a login attempt fails, so checking the hidden input is unreliable.
+				resetTurnstileWidget(targetId);
 			}, delay);
 		});
 	}