Exclude front-end login actions

#34

Author: bencroker

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Release Notes for Snaptcha
 
+## 5.2.0 - Unreleased
+
+- Added front-end login actions to the list of excluded actions ([#34](https://github.com/putyourlightson/craft-snaptcha/issues/34)).
+
 ## 5.1.2 - 2025-07-01
 
 - Improved the check for nested uploaded file fields.

composer.json

@@ -1,7 +1,7 @@
 {
   "name": "putyourlightson/craft-snaptcha",
   "description": "Automatically validates forms and prevents spam bots from submitting to your site.",
-  "version": "5.1.2",
+  "version": "5.2.0",
   "type": "craft-plugin",
   "homepage": "https://putyourlightson.com/plugins/snaptcha",
   "license": "proprietary",

src/services/SnaptchaService.php

@@ -39,13 +39,17 @@ class SnaptchaService extends Component
      * @const string[]
      */
     public const EXCLUDE_CONTROLLER_ACTIONS = [
+        // Craft CMS actions
+        'users/login',
+        'graphql/api',
+        'templates/render',
+        'auth/verify-totp',
+        // Plugins actions
         'ad-wizard/tracking/click',
         'commerce/webhooks/process-webhook',
         'complete-cookie-consent/consent/submit',
         'cookie-consent/consent/update',
         'enupal-stripe/checkout/create-session',
-        'graphql/api',
-        'templates/render',
     ];
 
     /**