FusionAuth / fusionauth-issues

FusionAuth issue submission project
https://fusionauth.io
90 stars 12 forks source link

[Bug]: Google recaptcha v3 unexpected invalid challenges #2747

Open callumbyrne opened 1 month ago

callumbyrne commented 1 month ago

What happened?

We are experiencing inconsistency with the usage of Google recaptcha v3. We have enabled recaptcha v3 on our tenant with the default threat score threshold of 0.5, and tried to verify the implementation with a playwright script. It took us changing the threat score threshold to 0.9 before we were able to get an invalid challenge error and it also allowed us to login with valid credentials using the script.

The following day we are now having issues manually logging in or setting new passwords altogether with the default threat score threshold of 0.5 returning invalid challenges. This behavior is also happening for a colleague who didn't run the script and is on a different network.

We expect running the playwright script to encounter invalid challenges and for manually inputted login attempts to work.

Version

1.48.1

Affects Versions

No response