Capcha not showing up.

[nitanmarcel]

Describe the bug The pages loads correctly but the captcha box doesn't. Instead there's just a blanks space where the box should be. And the page needs a few refresh until a text saying that only opening the page helps resolving the captcha.

Screenshots or Logs

Configuration (please complete the following information):

• Browser: Firefox, Edge
• Hosting solution localhost

[claabs]

What do the browser logs in devtools/F12 say?

[nitanmarcel]

What to the browser logs in devtools/F12 say?

For some reason I can't reproduce this, the capcha just finishes by itself. Is there a way to force capcha reset after restarting the container so I can debug it?

[claabs]

You can delete your <email>-cookies.json to force a new login.

[nitanmarcel]

@claabs looks like it was my internet connection which was slow at the moment I first tried it, everything works fine now.

Anyway I'll still post a log:

id: 82255462-051e-4be7-b9aa-cd3586572f73 index.ts:48
pkey: null index.ts:49
blob: undefined index.ts:50
Performing Talon captcha. Getting session... index.ts:253
Fingerprint JSON: 
Object { fingerprint_version: 4, timestamp: "2021-02-26T13:16:18.332Z", math_rand: "12a2e1ffb8525e", document: {…}, navigator: {…}, web_gl: {…}, window: {…}, date: {…} }
talon-harness.ts:257
Some cookies are misusing the recommended “SameSite“ attribute 47
Cookie “EPIC_LOCALE_COOKIE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_SESSION_ID” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “XSRF-TOKEN” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_DEVICE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “bm_sz” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_SESSION_REPUTATION” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_SESSION_AP” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “ak_bmsc” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “bm_sv” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_LOCALE_COOKIE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_SESSION_ID” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “XSRF-TOKEN” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_DEVICE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “bm_sz” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_SESSION_REPUTATION” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “EPIC_SESSION_AP” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “ak_bmsc” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “bm_sv” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite init
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. 2 api.js
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite fe752231657ti20929d6cbf2d4fd75f43
Cookie “EPIC_LOCALE_COOKIE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_SESSION_ID” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “XSRF-TOKEN” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_DEVICE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “bm_sz” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_SESSION_REPUTATION” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_SESSION_AP” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “ak_bmsc” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “bm_sv” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_LOCALE_COOKIE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_SESSION_ID” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “XSRF-TOKEN” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_DEVICE” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “_abck” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “bm_sz” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_SESSION_REPUTATION” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “EPIC_SESSION_AP” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “ak_bmsc” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
Cookie “bm_sv” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite complete
captchaKey: 37D033EB-6489-3763-2AE1-A228C04103F5 index.ts:269
session: 
Object { session: {…}, signature: "Uwon978SvB58kF/LCYEYsOrhIkdobFE9tCPVGe97xCU=" }
index.ts:270
timing: 
Array(5) [ {…}, {…}, {…}, {…}, {…} ]
index.ts:271
Creating Arkose captcha script index.ts:233
Use of the orientation sensor is deprecated. fe752231657ti20929d6cbf2d4fd75f43:1:48872
Use of the motion sensor is deprecated. fe752231657ti20929d6cbf2d4fd75f43:1:48916
Object { setConfig: G(), getConfig: L(), reset: N(), run: P(), version: "8.3.1" }
index.ts:186
Creating Arkose captcha index.ts:188
arkoseLoaded false index.ts:227
Cookie “_abck” has been rejected for invalid domain. fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” has been rejected for invalid domain. 3 fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” has been rejected for invalid domain. fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” has been rejected because it is already expired. fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” has been rejected because it is already expired. fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” has been rejected for invalid domain. fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” has been rejected for invalid domain. 3 fe752231657ti20929d6cbf2d4fd75f43
Cookie “_abck” has been rejected for invalid domain. fe752231657ti20929d6cbf2d4fd75f43
Some cookies are misusing the recommended “SameSite“ attribute 5
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. api
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. api
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. 2 37D033EB-6489-3763-2AE1-A228C04103F5
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. 2 fc_bootstrap.js
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. 2 a
ready index.ts:220
Use of the motion sensor is deprecated. funcaptcha_api.js:2:58365
Use of the orientation sensor is deprecated. funcaptcha_api.js:2:58845
arkose captchaResult 
Object { completed: true, token: "426038f4a7d65330.9748684705|r=eu-west-1|metabgclr=%23202020|maintxtclr=%23808080|mainbgclr=%23202020%3B|guitextcolor=%23808080|metaiconclr=%238a8a8a|meta_height=384|meta_width=340|meta=11|pk=37D033EB-6489-3763-2AE1-A228C04103F5|at=40|sup=1|rid=79|ag=101|cdn_url=https://cdn.arkoselabs.com/fc|lurl=https://audio-eu-west-1.arkoselabs.com|surl=https://epic-games-api.arkoselabs.com", suppressed: true }
index.ts:196
talon captchaResult: 426038f4a7d65330.9748684705|r=eu-west-1|metabgclr=%23202020|maintxtclr=%23808080|mainbgclr=%23202020%3B|guitextcolor=%23808080|metaiconclr=%238a8a8a|meta_height=384|meta_width=340|meta=11|pk=37D033EB-6489-3763-2AE1-A228C04103F5|at=40|sup=1|rid=79|ag=101|cdn_url=https://cdn.arkoselabs.com/fc|lurl=https://audio-eu-west-1.arkoselabs.com|surl=https://epic-games-api.arkoselabs.com index.ts:102
Successfully sent Captcha token index.ts:121
The script from “https://epic-games-api.arkoselabs.com/fc/a/?callback=fcAnalytic&category=loaded&action=game%20loaded&session_token=426038f4a7d65330.9748684705&r=eu-west-1&metabgclr=%23202020&maintxtclr=%23808080&mainbgclr=%23202020%3B&guitextcolor=%23808080&metaiconclr=%238a8a8a&meta_height=384&meta_width=340&meta=11&pk=37D033EB-6489-3763-2AE1-A228C04103F5&at=40&sup=1&rid=79&ag=101&cdn_url=https://cdn.arkoselabs.com/fc&lurl=https://audio-eu-west-1.arkoselabs.com&surl=https://epic-games-api.arkoselabs.com&data[public_key]=37D033EB-6489-3763-2AE1-A228C04103F5&data[site]=http://localhost:3001/?id=82255462-051e-4be7-b9aa-cd3586572f73” was loaded even though its MIME type (“application/json”) is not a valid JavaScript MIME type. enforcement.13ea607977c3bb05c2de3b46f9bcb55a.html
Some cookies are misusing the recommended “SameSite“ attribute 2
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. api
Cookie “__cfduid” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”. api

[claabs]

There's two kinds of captchas you can get from Epic Games: Arkose and hCaptcha. In your first screenshot, that looks like a hCaptcha version. In your latest logs, you got an Arkose captcha.

You mentioned in the other issue that the link in the email wasn't correct, which leads me to think that your just have the baseUrl configured incorrectly. The hCaptcha solution has to do a bunch of string replacement with the baseUrl on the hCaptcha scripts, which probably caused issues.

Since the scripts tend to cache aggressively, it's probably best to just change the Docker port to -p 3000:3000, and leave the baseUrl the same. You can read more on how Docker ports work here.

[nitanmarcel]

There's two kinds of captchas you can get from Epic Games: Arkose and hCaptcha. In your first screenshot, that looks like a hCaptcha version. In your latest logs, you got an Arkose captcha.

You mentioned in the other issue that the link in the email wasn't correct, which leads me to think that your just have the baseUrl configured incorrectly. The hCaptcha solution has to do a bunch of string replacement with the baseUrl on the hCaptcha scripts, which probably caused issues.

Since the scripts tend to cache aggressively, it's probably best to just change the Docker port to -p 3000:3000, and leave the baseUrl the same. You can read more on how Docker ports work here.

The baseurl is not changed, anyway I'm running docker with -p 3000:3001 as stated in the readme build command which probably that's why the port in the uri is 3001.

But thanks, I'll make the updates. Also have you checked the last issue I made? Made a small suggestion there

[claabs]

Updated the readme to prevent the baseUrl/port issue you ran into. https://github.com/claabs/epicgames-freegames-node/commit/b247df73863a4c445d8ab5f0f01c231e29329fb5

And yes, I saw your other issue. I wasn't aware of the Google change, so thanks for that!

[nitanmarcel]

@claabs does hCaptcha requires you only to open the page or it also requires have man verification? I want to improve the process on my end by opening the page with a chrome driver

[claabs]

It depends on hCaptcha's reputation score of your browser/IP. A webdriver instance probably has the worst reputation possible, so it would have to solve a captcha.