Secure public contestant forms by asking the code first

2026-08-09 10:09:04 +02:00
parent f9e100b85f
commit 84e3424fcf
6 changed files with 83 additions and 14 deletions
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -63,6 +63,8 @@ Rails.application.routes.draw do
  get "public/:id/offline/:token/completed", to: "contests#offline_completed"
  get "public/p/:contestant_id", to: "contestants#get_public_completion"
  post "public/p/:contestant_id", to: "contestants#post_public_completion"
+  get "public/p/:contestant_id/code", to: "contestants#get_public_completion_code"
+  post "public/p/:contestant_id/code", to: "contestants#post_public_completion_code"
  get "public/p/:contestant_id/updated", to: "contestants#public_completion_updated"

  direct :public_scoreboard do |contest|