modified reading tokens from headers

[alimaktabi]

Summary by Sourcery

Modify the method of retrieving turnstile tokens from request data to request headers and update CORS settings to allow specific headers.

Enhancements:

• Allow additional headers 'cf-turnstile-response' and 'hc-turnstile-response' in CORS settings.

[sourcery-ai]

Reviewer's Guide by Sourcery

This pull request modifies the way CAPTCHA tokens are read from the request, moving from reading from the request data to reading from the request headers. It also updates the CORS settings to allow specific headers related to CAPTCHA responses.

File-Level Changes

Change	Details	Files
Updated CORS settings to allow specific CAPTCHA-related headers	Added 'cf-turnstile-response' and 'hc-turnstile-response' to the list of allowed CORS headers	brightIDfaucet/settings.py
Modified CAPTCHA token retrieval from request data to request headers	Changed CloudFlare turnstile token retrieval from request.data to request.headers Changed hCaptcha token retrieval from request.data to request.headers Removed fallback to 'cf-turnstile-response' for hCaptcha token retrieval	core/constraints/captcha.py

---

Tips

• Trigger a new Sourcery review by commenting @sourcery-ai review on the pull request.
• Continue your discussion with Sourcery by replying directly to review comments.
• You can change your review settings at any time by accessing your dashboard:
  • Enable or disable the Sourcery-generated pull request summary or reviewer's guide;
  • Change the review language;
• You can always contact us if you have any questions or feedback.

[sourcery-ai]

Hey @alimaktabi - I've reviewed your changes - here's some feedback:

Overall Comments:

• Consider maintaining the fallback option for 'cf-turnstile-response' in the HCaptcha check to ensure backward compatibility with existing clients.

Here's what I looked at during the review

• 🟢 General issues: all looks good
• 🟡 Security: 1 issue found
• 🟢 Testing: all looks good
• 🟢 Complexity: all looks good
• 🟢 Documentation: all looks good

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment to tell me if it was helpful.}