2017-12-11 07:58:55 -05:00
|
|
|
request = require 'request'
|
|
|
|
|
logger = require 'logger-sharelatex'
|
|
|
|
|
Settings = require 'settings-sharelatex'
|
|
|
|
|
|
|
|
|
|
module.exports = CaptchaMiddleware =
|
2019-04-08 09:41:08 -04:00
|
|
|
validateCaptcha: (action) ->
|
|
|
|
|
return (req, res, next) ->
|
|
|
|
|
if !Settings.recaptcha?.siteKey?
|
2017-12-11 07:58:55 -05:00
|
|
|
return next()
|
2019-04-08 09:41:08 -04:00
|
|
|
inviteAndCaptchaDisabled = action == 'invite' and Settings.recaptcha.disabled.invite
|
|
|
|
|
registerAndCaptchaDisabled = action == 'register' and Settings.recaptcha.disabled.register
|
|
|
|
|
if inviteAndCaptchaDisabled or registerAndCaptchaDisabled
|
|
|
|
|
return next()
|
|
|
|
|
response = req.body['g-recaptcha-response']
|
|
|
|
|
options =
|
|
|
|
|
form:
|
|
|
|
|
secret: Settings.recaptcha.secretKey
|
|
|
|
|
response: response
|
|
|
|
|
json: true
|
|
|
|
|
request.post "https://www.google.com/recaptcha/api/siteverify", options, (error, response, body) ->
|
|
|
|
|
return next(error) if error?
|
|
|
|
|
if !body?.success
|
|
|
|
|
logger.warn {statusCode: response.statusCode, body: body}, 'failed recaptcha siteverify request'
|
|
|
|
|
return res.status(400).send({errorReason:"cannot_verify_user_not_robot", message:
|
|
|
|
|
{text:"Sorry, we could not verify that you are not a robot. Please check that Google reCAPTCHA is not being blocked by an ad blocker or firewall."}
|
|
|
|
|
})
|
|
|
|
|
else
|
|
|
|
|
return next()
|
