Skip to content

Conversation

@marius-mather
Copy link
Collaborator

@marius-mather marius-mather commented Dec 12, 2025

Description

We need to validate recaptcha responses on the backend, otherwise users can bypass our recaptcha check by sending direct requests.

Changes

  • Add method to validate a recaptcha token via the recaptcha API
  • Validate recaptcha during registration
  • Unit tests

Checklist

  • I have commented my code, particularly in hard-to-understand areas
  • I have added unit / integration tests that prove my fix is effective or that my feature works
  • I have run all tests locally and they pass
  • I have updated the documentation (if applicable)
  • For any new secrets, I have updated the shared spreadsheet and the GitHub Secrets.
    NA: will be set in infra code

How to Test Manually (if necessary)

Run uv run pytest

@marius-mather marius-mather marked this pull request as ready for review December 12, 2025 03:55
@marius-mather marius-mather merged commit 6db2801 into main Dec 16, 2025
5 checks passed
@marius-mather marius-mather deleted the feat/validate-recaptcha branch December 16, 2025 00:40
marius-mather added a commit that referenced this pull request Dec 16, 2025
…te-recaptcha"

This reverts commit 6db2801, reversing
changes made to 237f9f8.
marius-mather added a commit that referenced this pull request Dec 16, 2025
Revert "Merge pull request #151 from AustralianBioCommons/feat/validate-recaptcha
marius-mather added a commit that referenced this pull request Dec 16, 2025
…tcha

feat: backend validation of recaptcha during registration
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants