feat(SEC-001): protect workspace bootstrap with turnstile

2026-03-25 10:02:10 +01:00
parent f6667b6b63
commit 40f7e74a1b
15 changed files with 323 additions and 34 deletions
--- a/app/pages/hedge.py
+++ b/app/pages/hedge.py
@@ -70,8 +70,7 @@ def legacy_hedge_page(request: Request):
 def workspace_hedge_page(workspace_id: str) -> None:
    repo = get_workspace_repository()
    if not repo.workspace_exists(workspace_id):
-        render_workspace_recovery()
-        return
+        return RedirectResponse(url="/", status_code=307)
    _render_hedge_page(workspace_id=workspace_id)