billisdead e31c268d54 Enforce consent token on submission, reduce default cooldown ...

- Require signed _ct cookie (set by POST /api/consent) before accepting any
  submission. Direct API calls without a prior consent flow are rejected 403.
- Add _sign_consent_token / _verify_consent_token (HMAC-SHA256, 24h TTL).
- Lower default CONTRIBUTION_COOLDOWN_SECONDS from 3600 to 240 (4 min).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-23 16:08:11 +02:00

..

flask-api

Enforce consent token on submission, reduce default cooldown

2026-06-23 16:08:11 +02:00

voix-du-peuple

Remove all Replit artifacts and references

2026-06-23 15:48:30 +02:00