first commit

Author: ArvidDeJong

.gitignore

@@ -0,0 +1,4 @@
+/vendor/
+/.idea/
+/.vscode/
+composer.lock

CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+All notable changes to **darvis/livewire-honeypot** are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.0] - 2025-10-23
+### Added
+- Initial release with:
+  - Livewire Trait `HasHoneypot`
+  - Service `HoneypotService`
+  - Blade component `<x-honeypot />`
+  - View publishing, Laravel auto‑discovery

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Darvis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,92 @@
+# darvis/livewire-honeypot
+
+Lightweight **honeypot + time‑trap** protection for **Livewire 3** (Laravel 11).  
+Blocks simple bots without CAPTCHAs, privacy‑friendly and unobtrusive.
+
+## Features
+- 🪤 Honeypot bait field (`present|size:0`)
+- ⏱️ Time‑trap (minimum fill time)
+- 🧩 Works as **Trait** for Livewire and as **Service** for controllers/APIs
+- 🧱 Blade component `<x-honeypot />` for easy inclusion
+- 🔌 Zero dependencies beyond Livewire 3 / Laravel 11
+
+## Installation
+
+```bash
+composer require darvis/livewire-honeypot
+```
+
+(For local development, you can add a `path` repository in your app's `composer.json`.)
+
+## Usage — Livewire (Trait)
+
+1) In your Livewire component:
+
+```php
+use Darvis\LivewireHoneypot\Traits\HasHoneypot;
+
+class ContactForm extends Component
+{
+    use HasHoneypot;
+
+    public string $name = '';
+    public string $email = '';
+    public string $message = '';
+
+    public function submit(): void
+    {
+        $this->validate([
+            'name' => 'required|string|min:2',
+            'email' => 'required|email',
+            'message' => 'required|string|min:10',
+        ]);
+
+        $this->validateHoneypot();
+
+        // process form ...
+
+        $this->reset(['name','email','message']);
+        $this->resetHoneypot();
+    }
+}
+```
+
+2) In your Blade (or Flux) view, add the component (place anywhere inside the form):
+
+```blade
+<x-honeypot />
+```
+
+## Usage — Controller / API (Service)
+
+```php
+use Darvis\LivewireHoneypot\Services\HoneypotService;
+
+public function store(Request $request, HoneypotService $honeypot)
+{
+    $honeypot->validate($request->only('hp_website', 'hp_started_at', 'hp_token'));
+    // process form ...
+}
+```
+
+To generate fields server‑side (non‑Livewire forms):
+
+```php
+$hp = app(Darvis\LivewireHoneypot\Services\HoneypotService::class)->generate();
+// pass $hp to your view to prefill hidden inputs
+```
+
+## Publishing the Blade view (optional)
+```bash
+php artisan vendor:publish --tag=livewire-honeypot-views
+```
+
+## Throttling (recommended)
+Add request rate‑limiting on your form route:
+
+```php
+Route::get('/contact', \App\Livewire\ContactForm::class)->middleware('throttle:10,1');
+```
+
+## License
+MIT © Arvid de Jong (info@arvid.nl)

composer.json

@@ -0,0 +1,25 @@
+{
+    "name": "darvis/livewire-honeypot",
+    "description": "Lightweight honeypot + time-trap protection for Livewire 3 forms",
+    "type": "library",
+    "license": "MIT",
+    "autoload": {
+        "psr-4": {
+            "Darvis\\LivewireHoneypot\\": "src/"
+        }
+    },
+    "extra": {
+        "laravel": {
+            "providers": [
+                "Darvis\\LivewireHoneypot\\HoneypotServiceProvider"
+            ]
+        }
+    },
+    "require": {
+        "php": "^8.2",
+        "laravel/framework": "^11.0",
+        "livewire/livewire": "^3.0"
+    },
+    "minimum-stability": "stable",
+    "prefer-stable": true
+}

resources/views/components/honeypot.blade.php

@@ -0,0 +1,24 @@
+{{-- Anonymous honeypot component. Usage: <x-honeypot /> --}}
+<div class="hp-field" aria-hidden="true">
+    <label>
+        <span>Website (leave empty)</span>
+        <input type="text"
+               name="hp_website"
+               {{ $attributes->whereStartsWith('wire:model')->first() ? '' : 'wire:model.lazy=hp_website' }}
+               tabindex="-1"
+               autocomplete="off" />
+    </label>
+    <input type="hidden" name="hp_started_at" {{ $attributes->whereStartsWith('wire:model')->first() ? '' : 'wire:model=hp_started_at' }}>
+    <input type="hidden" name="hp_token" {{ $attributes->whereStartsWith('wire:model')->first() ? '' : 'wire:model=hp_token' }}>
+
+    <style>
+        .hp-field {
+            position: absolute !important;
+            left: -10000px !important;
+            top: auto !important;
+            width: 1px !important;
+            height: 1px !important;
+            overflow: hidden !important;
+        }
+    </style>
+</div>

src/HoneypotServiceProvider.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace Darvis\LivewireHoneypot;
+
+use Illuminate\Support\ServiceProvider;
+use Illuminate\Support\Facades\Blade;
+
+class HoneypotServiceProvider extends ServiceProvider
+{
+    public function boot(): void
+    {
+        $this->loadViewsFrom(__DIR__ . '/../resources/views', 'livewire-honeypot');
+
+        // Register <x-honeypot />
+        Blade::component('livewire-honeypot::components.honeypot', 'honeypot');
+
+        // Allow publishing the views
+        $this->publishes([
+            __DIR__ . '/../resources/views' => resource_path('views/vendor/livewire-honeypot'),
+        ], 'livewire-honeypot-views');
+    }
+}

src/Services/HoneypotService.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace Darvis\LivewireHoneypot\Services;
+
+use Illuminate\Validation\ValidationException;
+use Illuminate\Support\Str;
+
+class HoneypotService
+{
+    public function generate(): array
+    {
+        return [
+            'hp_website' => '',
+            'hp_started_at' => now()->getTimestamp(),
+            'hp_token' => Str::random(24),
+        ];
+    }
+
+    public function validate(array $data, int $minimumSeconds = 3): void
+    {
+        validator($data, [
+            'hp_website' => 'present|size:0',
+            'hp_started_at' => 'required|integer',
+            'hp_token' => 'required|string|min:10',
+        ], [
+            'hp_website.size' => 'Spam detected.',
+        ])->validate();
+
+        $elapsed = now()->getTimestamp() - (int)($data['hp_started_at'] ?? 0);
+        if ($elapsed < $minimumSeconds) {
+            throw ValidationException::withMessages([
+                'hp_website' => 'Form submitted too quickly.',
+            ]);
+        }
+    }
+}

src/Traits/HasHoneypot.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace Darvis\LivewireHoneypot\Traits;
+
+use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
+
+trait HasHoneypot
+{
+    public string $hp_website = '';
+    public int $hp_started_at = 0;
+    public string $hp_token = '';
+
+    protected int $minimumFillSeconds = 3;
+
+    public function initializeHasHoneypot(): void
+    {
+        $this->resetHoneypot();
+    }
+
+    protected function resetHoneypot(): void
+    {
+        $this->hp_website = '';
+        $this->hp_started_at = now()->getTimestamp();
+        $this->hp_token = Str::random(24);
+    }
+
+    protected function validateHoneypot(): void
+    {
+        // Require presence & emptiness of the bait field, plus meta fields
+        $this->validate([
+            'hp_website' => 'present|size:0',
+            'hp_started_at' => 'required|integer',
+            'hp_token' => 'required|string|min:10',
+        ], [
+            'hp_website.size' => 'Spam detected.',
+        ]);
+
+        // Time-trap: minimum time spent before submit
+        $elapsed = now()->getTimestamp() - (int) $this->hp_started_at;
+        if ($elapsed < $this->minimumFillSeconds) {
+            throw ValidationException::withMessages([
+                'hp_website' => 'Form submitted too quickly.',
+            ]);
+        }
+    }
+}