axone-protocol / faucet-web

🚰 Token faucet web app for the Axone testnets.
https://faucet.okp4.network/
BSD 3-Clause "New" or "Revised" License
15 stars 5 forks source link

Request funds - reCaptcha #227

Closed ChaimaaZaoui closed 1 year ago

ChaimaaZaoui commented 1 year ago

As a user of https://faucet.okp4.network/, I want to encounter a reCAPTCHA challenge when I click on Send me KNOW button in both Request funds with OKP4 address and Request funds with Keplr sections , So that the system can verify that I am a human user and prevent spam or malicious fund request.

Scenario 1: Clicking on Send me KNOW button triggers a reCAPTCHA challenge Given that I am on https://faucet.okp4.network/ with Send me KNOW buttons that requires user verification, When I click on the designated button, Then I should be presented with a reCAPTCHA challenge on the section of the button.

Scenario 2: Successfully completing the reCAPTCHA challenge Given that I am presented with a reCAPTCHA challenge after clicking Send me KNOW button, When I interact with the reCAPTCHA challenge, such as selecting images or entering text as instructed, Then the system should verify my human identity and proceed with fund request.

Scenario 3: Failed attempt to complete the reCAPTCHA challenge Given that I am presented with a reCAPTCHA challenge after clicking Send me KNOW button, When I attempt to complete the challenge but fail to pass the verification, Then I should be notified about the failure and provided with an option to try again.

Scenario 4: Cancelling the reCAPTCHA challenge Given that I am presented with a reCAPTCHA challenge after clicking Send me KNOW button, When I choose to cancel or skip the challenge, Then the system should prevent fund request and maintain the current state without proceeding further.

Scenario 5: Accessibility considerations for reCAPTCHA challenge Given that I have accessibility needs, When encountering a reCAPTCHA challenge, Then the system should provide an alternative mechanism or option to ensure accessibility, such as an audio challenge or an option for alternative verification methods.

image.png

image.png

ErikssonJoakim commented 1 year ago

@ChaimaaZaoui @ccamel To clarify which version do we want to use for the reCAPTCHA? The specifications are in line with v2 where you're confronted with a challenge but I know we've talked about implementing v3.

V3 doesn't require a challenge for verification and instead works on a point system, judging the users behaviour on the whole site and if necessary prevents action from being taken.

https://developers.google.com/recaptcha/docs/versions?hl=en https://www.thecrazyprogrammer.com/2020/04/recaptcha-v2-vs-v3.html

ChaimaaZaoui commented 1 year ago

@ErikssonJoakim we are going to use the recaptcha V2. here are some faucets that use it as well :

MdechampG commented 1 year ago

Test 20/06 All scenario passed ✅