Files
property-management-network/components/shared/turnstile-widget.tsx
Leon SerfatyandClaude Opus 4.8 c9968531e4 Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening
Batch commit of the pending working tree on security/audit-fixes-2026-07.
Major areas:
- Outbound webhooks / Zapier: schema + signed delivery with retries, public
  v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain.
- Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS
  (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when
  Spaces is unconfigured instead of silently using ephemeral disk.
- Integrations & features (concurrent work): accounting (QuickBooks/Xero),
  e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding,
  expanded legal pages.
- DB migrations 0006–0009.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-02 13:42:34 -04:00

81 lines
2.3 KiB
TypeScript

"use client"
import { useEffect, useRef } from "react"
import { cn } from "@/lib/utils"
declare global {
interface Window {
turnstile?: {
render: (el: HTMLElement, opts: Record<string, unknown>) => string
remove: (id: string) => void
reset: (id?: string) => void
}
}
}
const SCRIPT_ID = "cf-turnstile-script"
const SCRIPT_SRC = "https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"
/**
* Cloudflare Turnstile widget (explicit render).
*
* Renders inside the enclosing <form>; on success Turnstile injects a hidden
* <input name="cf-turnstile-response"> that is submitted with the form and
* verified server-side by verifyTurnstile(). Renders nothing when the public
* site key is not configured, so the forms still work without Turnstile.
*/
export function TurnstileWidget({ className }: { className?: string }) {
const siteKey = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY
const containerRef = useRef<HTMLDivElement>(null)
const widgetIdRef = useRef<string | null>(null)
useEffect(() => {
if (!siteKey) return
let cancelled = false
const render = () => {
if (cancelled || widgetIdRef.current || !containerRef.current || !window.turnstile) return
widgetIdRef.current = window.turnstile.render(containerRef.current, {
sitekey: siteKey,
theme: "dark",
})
}
if (!document.getElementById(SCRIPT_ID)) {
const script = document.createElement("script")
script.id = SCRIPT_ID
script.src = SCRIPT_SRC
script.async = true
script.defer = true
script.onload = render
document.head.appendChild(script)
} else {
render()
}
// Fallback: the script may already be cached/loaded so onload won't fire.
const poll = window.setInterval(() => {
if (window.turnstile) {
render()
window.clearInterval(poll)
}
}, 150)
return () => {
cancelled = true
window.clearInterval(poll)
if (widgetIdRef.current && window.turnstile) {
try {
window.turnstile.remove(widgetIdRef.current)
} catch {
// widget already removed
}
widgetIdRef.current = null
}
}
}, [siteKey])
if (!siteKey) return null
return <div ref={containerRef} className={cn("min-h-[65px]", className)} />
}