fix: remove Flutter captcha bypass (#1234)

fluxer_api/src/api/auth/AuthController.ts

@@ -39,7 +39,7 @@ import {
 } from '@fluxer/schema/src/domains/auth/AuthSchemas';
 import {Config} from '../Config';
 import {DefaultUserOnly, LoginRequiredAllowSuspicious} from '../middleware/AuthMiddleware';
-import {CaptchaMiddleware, CaptchaMiddlewareSkipFlutter} from '../middleware/CaptchaMiddleware';
+import {CaptchaMiddleware} from '../middleware/CaptchaMiddleware';
 import {LocalAuthMiddleware} from '../middleware/LocalAuthMiddleware';
 import {RateLimitMiddleware} from '../middleware/RateLimitMiddleware';
 import {OpenAPI} from '../middleware/ResponseTypeMiddleware';
@@ -133,7 +133,7 @@ export function AuthController(app: HonoApp) {
 	app.post(
 		'/auth/login',
 		LocalAuthMiddleware,
-		CaptchaMiddlewareSkipFlutter,
+		CaptchaMiddleware,
 		RateLimitMiddleware(RateLimitConfigs.AUTH_LOGIN),
 		Validator('json', LoginRequest),
 		OpenAPI({

fluxer_api/src/api/middleware/CaptchaMiddleware.ts

@@ -11,7 +11,6 @@ import type {InstanceCaptchaEffectiveConfig, InstanceCaptchaProvider} from '../i
 import type {User} from '../models/User';
 import {accountPolicyContactHasCapability} from '../risk/AccountPolicyService';
 import type {HonoEnv} from '../types/HonoEnv';
-import {isFluxerFlutterClient} from '../utils/UserAgentUtils';
 
 function resolveProviderSecret(
 	config: InstanceCaptchaEffectiveConfig,
@@ -88,9 +87,3 @@ export const CaptchaMiddleware = createMiddleware<HonoEnv>(async (ctx, next) =>
 	await verifyCaptchaToken(ctx);
 	await next();
 });
-export const CaptchaMiddlewareSkipFlutter = createMiddleware<HonoEnv>(async (ctx, next) => {
-	if (!isFluxerFlutterClient(ctx.req.raw)) {
-		await verifyCaptchaToken(ctx);
-	}
-	await next();
-});