mirror of
https://github.com/pezkuwichain/pwap.git
synced 2026-08-10 05:45:46 +00:00
SatoshiQaziMuhammed
338472629d
Driving the real login page in a browser showed what shipping this actually looks like when Cloudflare decides a visitor must click: the submit button sits on 'Signing in...' while an unnoticed 'Verify you are human' checkbox waits in the bottom-right corner. Nothing tells the user it is there. They conclude login is broken, and they are not wrong. Two changes: - The challenge is centred over a dimmed backdrop while it is visible, and returns to the corner once answered. Detected by measuring the container rather than by Turnstile's interactive callbacks: those callbacks are not in the documentation this was written against, and a callback name that turns out to be wrong fails silently — leaving the challenge in the corner, which is the bug being fixed. - A 90 second cap on waiting for a token. Without it, a challenge nobody answers leaves the button spinning forever with no error and no way back. Every caller already surfaces a rejection to the user. The ResizeObserver fallback polls instead of returning a no-op. Doing nothing there would restore the original bug on those browsers and do it without an error, which is the worst way for a fix to be missing.