Hi! Big fan of this starter kit.
I noticed the current auth setup (Login/Magic Link) could be vulnerable to spam/bot abuse, which drives up costs on Resend and Stripe.
Adding reCAPTCHA/Cloudflare is usually a pain for starter kits because it forces users to set up external Google Cloud accounts just to run npm run dev.
The Proposal:
I've open-sourced a lightweight protocol called IronWall SDK.
It uses Client-Side Proof-of-Work (Argon2) to stop bots.
1. Zero Config: No Google Cloud Console setup required.
2. Tiny: 3KB (vs Google's heavy script).
3. Privacy: No cookies/tracking.
I would love to submit a PR to add an optional component to the auth forms. It would make the starter kit spam-resistant out of the box without adding setup friction.
Repo: https://github.com/clein154/ironwall-sdk
Demo: https://ironwall-protocol.xyz
Let me know if you'd be open to a PR!
Hi! Big fan of this starter kit.
I noticed the current auth setup (Login/Magic Link) could be vulnerable to spam/bot abuse, which drives up costs on Resend and Stripe.
Adding reCAPTCHA/Cloudflare is usually a pain for starter kits because it forces users to set up external Google Cloud accounts just to run npm run dev.
The Proposal:
I've open-sourced a lightweight protocol called IronWall SDK.
It uses Client-Side Proof-of-Work (Argon2) to stop bots.
1. Zero Config: No Google Cloud Console setup required.
2. Tiny: 3KB (vs Google's heavy script).
3. Privacy: No cookies/tracking.
I would love to submit a PR to add an optional component to the auth forms. It would make the starter kit spam-resistant out of the box without adding setup friction.
Repo: https://github.com/clein154/ironwall-sdk
Demo: https://ironwall-protocol.xyz
Let me know if you'd be open to a PR!