fix(auth): clear dangling timeout after captcha promise settles

Use .finally(() => clearTimeout(timeoutId)) to clean up the 15s
timeout timer when the captcha resolves before the deadline.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: waleedlatif1

apps/sim/app/(auth)/login/login-form.tsx

@@ -176,16 +176,17 @@ export default function LoginPage({
       if (turnstileSiteKey && turnstileRef.current) {
         try {
           turnstileRef.current.reset()
+          let timeoutId: ReturnType<typeof setTimeout> | undefined
           token = await Promise.race([
             new Promise<string>((resolve, reject) => {
               captchaResolveRef.current = resolve
               captchaRejectRef.current = reject
               turnstileRef.current?.execute()
             }),
-            new Promise<string>((_, reject) =>
-              setTimeout(() => reject(new Error('Captcha timed out')), 15_000)
-            ),
-          ])
+            new Promise<string>((_, reject) => {
+              timeoutId = setTimeout(() => reject(new Error('Captcha timed out')), 15_000)
+            }),
+          ]).finally(() => clearTimeout(timeoutId))
         } catch {
           setPasswordErrors(['Captcha verification failed. Please try again.'])
           setShowValidationError(true)

apps/sim/app/(auth)/signup/signup-form.tsx

@@ -256,16 +256,17 @@ function SignupFormContent({
       if (turnstileSiteKey && turnstileRef.current) {
         try {
           turnstileRef.current.reset()
+          let timeoutId: ReturnType<typeof setTimeout> | undefined
           token = await Promise.race([
             new Promise<string>((resolve, reject) => {
               captchaResolveRef.current = resolve
               captchaRejectRef.current = reject
               turnstileRef.current?.execute()
             }),
-            new Promise<string>((_, reject) =>
-              setTimeout(() => reject(new Error('Captcha timed out')), 15_000)
-            ),
-          ])
+            new Promise<string>((_, reject) => {
+              timeoutId = setTimeout(() => reject(new Error('Captcha timed out')), 15_000)
+            }),
+          ]).finally(() => clearTimeout(timeoutId))
         } catch {
           setPasswordErrors(['Captcha verification failed. Please try again.'])
           setShowValidationError(true)