Security Gates Demo
Real-world scenarios showing anti-abuse protection
The 5 Security Gates
Gate 1:
Primary Tester Check - Must claim primary code first
Gate 2:
Account Age - Min 7 days old
Gate 3:
Max Codes - Max 3 active codes at once
Gate 4:
Rate Limiting - Max 1 code per day
Gate 5:
Expiry - Codes expire after 30 days
✅ ALLOWED: User generates 1st code
User claims primary code → generates secondary code
›Day 1, 2pm: Claims primary code SNAPPY2025BETA
›Day 1, 3pm: Generates code #1 (TESTER-ABC123-SECONDARY)
›✅ SUCCESS - All gates passed
✅ ALLOWED: User generates 2nd code next day
Rate limit resets each day
›Day 2, 10am: Tries to generate 2nd code
›Gate check: 1 code generated yesterday (not today) ✅
›Gate check: Account 3 days old ✅
›Gate check: Only 1 active code (under limit of 3) ✅
›✅ SUCCESS - Code #2 generated
❌ BLOCKED: User tries 2 codes same day
Max 1 code per day rate limit
›Day 1, 3pm: Generates code #1 ✅
›Day 1, 4pm: Tries to generate code #2
›Rate limiting check: Already generated 1 code TODAY ❌
›❌ BLOCKED - 'You can only generate 1 code per day'
❌ BLOCKED: User has 3 active codes
Max 3 active codes at once
›Day 1: Generates code #1 ✅
›Day 2: Generates code #2 ✅
›Day 3: Generates code #3 ✅
›Day 4: Tries to generate code #4
›Active codes check: 3 codes still valid ❌
›❌ BLOCKED - 'Max 3 secondary codes at time. Codes expire after 30 days'
❌ BLOCKED: New account (< 7 days old)
Prevent brand new accounts from farming codes
›Day 1, 12am: User signs up
›Day 1, 1am: Claims primary tester code ✅
›Day 1, 2am: Tries to generate secondary code
›Account age check: 1 hour old (need 7 days) ❌
›❌ BLOCKED - 'Account must be 7+ days old'
❌ BLOCKED: Not a primary tester
Must claim primary code first
›User registers but doesn't claim primary code
›Tries to generate secondary code immediately
›Primary tester check: is_tester = false ❌
›❌ BLOCKED - 'Claim a primary tester code first'
Why You Can't Farm Codes
Attack 1: "Generate 100 codes fast"
❌ Rate limit: Only 1 per day + max 3 active = impossible
Attack 2: "Create fake accounts to generate codes"
❌ Account age gate: Need 7-day-old account + must claim primary code first
Attack 3: "Share the same code with 100 friends"
❌ Single-use: Code marked as used after first claim, can't be reused
Attack 4: "Let codes expire then regenerate"
❌ Still limited: Max 3 at a time + 1 per day = ~10 codes/month max