changelog

Author: JiahuiWho

CHANGELOG.md

@@ -9,6 +9,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 ### Added
 
 - Add integration tests for embedded wallets. [1041](https://github.com/stellar/stellar-disbursement-platform-backend/pull/1041)
+- Add endpoint for fetch captcha config. [1052](https://github.com/stellar/stellar-disbursement-platform-backend/pull/1052)
 
 ## [6.1.0](https://github.com/stellar/stellar-disbursement-platform-backend/releases/tag/6.1.0) ([diff](https://github.com/stellar/stellar-disbursement-platform-backend/compare/6.0.1...6.1.0))
 

dev/env-config-testnet.js

@@ -3,6 +3,6 @@ window._env_ = {
     STELLAR_EXPERT_URL: "https://stellar.expert/explorer/testnet",
     HORIZON_URL: "https://horizon-testnet.stellar.org",
     RPC_ENABLED: true,
-    RECAPTCHA_SITE_KEY: "6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI",
+    RECAPTCHA_SITE_KEY: "6LcgOWcsAAAAAJkeyQHEW4-yA-Eu79kYHDYXeznF",
     SINGLE_TENANT_MODE: false
 };

internal/serve/validators/recaptcha_v3.go

@@ -36,6 +36,9 @@ type reCAPTCHAV3VerifyResponse struct {
 
 // IsTokenValid validates a reCAPTCHA v3 token and checks if the score meets the minimum threshold.
 func (v *GoogleReCAPTCHAV3Validator) IsTokenValid(ctx context.Context, token string) (bool, error) {
+	fmt.Printf("[DEBUG] reCAPTCHA V3 IsTokenValid: secretKey=%s...%s, token=%s...\n",
+		v.SiteSecretKey[:6], v.SiteSecretKey[len(v.SiteSecretKey)-4:], token[:min(20, len(token))])
+
 	payload := fmt.Sprintf("secret=%s&response=%s", v.SiteSecretKey, token)
 
 	req, err := http.NewRequestWithContext(ctx, http.MethodPost, v.VerifyTokenURL, strings.NewReader(payload))
@@ -56,6 +59,8 @@ func (v *GoogleReCAPTCHAV3Validator) IsTokenValid(ctx context.Context, token str
 		return false, fmt.Errorf("reading body response: %w", err)
 	}
 
+	fmt.Printf("[DEBUG] reCAPTCHA V3 Google response: %s\n", string(respBodyBytes))
+
 	var respBody reCAPTCHAV3VerifyResponse
 	if err := json.Unmarshal(respBodyBytes, &respBody); err != nil {
 		return false, fmt.Errorf("unmarshalling body response: %w", err)
@@ -77,6 +82,7 @@ func (v *GoogleReCAPTCHAV3Validator) IsTokenValid(ctx context.Context, token str
 		return false, fmt.Errorf("reCAPTCHA v3 score %.2f is below minimum threshold %.2f", respBody.Score, v.MinScore)
 	}
 
+	fmt.Printf("[DEBUG] reCAPTCHA V3 validation passed: score=%.2f, minScore=%.2f\n", respBody.Score, v.MinScore)
 	return true, nil
 }