• feat(captcha): SetSecret for live HMAC secret rotation

    Ghost released this 2026-07-20 06:20:43 +00:00 | 3 commits to main since this release

    Server now holds the secret in an atomic.Pointer so a running instance can
    swap it; outstanding challenge and verification tokens signed with the old
    secret immediately fail verification.

    Co-Authored-By: Claude Fable 5 noreply@anthropic.com

    Downloads