twenty
twenty copied to clipboard
Deploy captcha (turnstile) in prod and setup monitoring
We've worked on a feature to protect our forms: https://github.com/twentyhq/twenty/pull/4626
We should now setup the env variables to add this protection on prod and on next.
Also in prod we should add some monitoring for captcha failure rate in possible (if captcha have a high failure rate we want to be notified. Probably we can set that in Cloudflare alerts?)
Make sure to test this well :)
The turnstile have been enabled on next, but it seems to only support "invisible" mode, is that expected? I assume that no captcha will actually show up and it might silently fail in the background.
If I enable regular mode on cloudflare console, I get an error in my browser console.
I went in private navigation with a VPN, and indeed I did get a silent fail with no captcha showing up
@Freebios yes that's expected! Captcha shouldn't be visible. Thanks!
doesn't seem to work on Next for me, let's wait before rolling out to prod
Were there any development on that matter?
Yes I think it's been deployed and everything works well now