omarryhan/aio-recaptcha

ReCaptcha isn't verified correctly

Closed this issue · 1 comments

The verify function checks the "success" field which is "whether this request was a valid reCAPTCHA token for your site". What it also should check is the score - "the score for this request (0.0 - 1.0)" ( https://developers.google.com/recaptcha/docs/v3 ). Developer should then define at which score to pass and at which to fail (usually you get 0.9).

Thanks for the tip!

I'll be happy to accept a PR if you're up for it.