search

anhskohbo / no-captcha

No CAPTCHA reCAPTCHA For Laravel.
https://packagist.org/packages/anhskohbo/no-captcha
MIT License
1.77k stars 234 forks source link

reCAPTCHA v3 integration #124

Closed philmarc closed 5 years ago

philmarc commented 5 years ago

Any plans to integrate latest Google reCAPTCHA v3?

josiasmontag commented 5 years ago

From the reCAPTCHA docs:

reCAPTCHA v2 is not going away! We will continue to fully support and improve security and usability for v2.

reCAPTCHA v3 is intended for power users, site owners that want more data about their traffic, and for use cases in which it is not appropriate to show a challenge to the user.

For example, a registration page might still use reCAPTCHA v2 for a higher-friction challenge, whereas more common actions like sign-in, searches, comments, or voting might use reCAPTCHA v3

Not sure if it makes sense to integrate v3 in this package, because there are fundamental design differences. Most importantly you can take variable action based on the score instead of just a yes/no validation.

I have created a reCAPTCHA v3 package (for v3 only): https://github.com/josiasmontag/laravel-recaptchav3. Currently I am using v2 (with this package) and v3 in parallel, depending on the use case.

martsie commented 5 years ago

Aha this solves a problem I've been having. In the README it says to setup a recaptcha key so I set up a v3 one thinking that I should use the latest and it doesn't work. For future googlers if you get "ERROR for site owner: Invalid key type" create a v2 key.