search

joscha / play-authenticate

An authentication plugin for Play Framework 2.x (Java)
http://joscha.github.com/play-authenticate/
Other
807 stars 367 forks source link

Signup spam protection - reCAPTCHA v2.0 #240

Open slimandslam opened 9 years ago

slimandslam commented 9 years ago

Google's latest reCAPTCHA (v2.0 API) is much better than the old version. And, if your site is public, and you allow anyone to signup, then signup spam protection is a must. Can this be integrated into play-authenticate?

Demo: http://www.google.com/recaptcha/api2/demo Widget and JS API: https://developers.google.com/recaptcha/docs/display

(There is no Java example for the v2.0 API yet, afaik)

joscha commented 9 years ago

I guess some amount of interop between JS and Java is needed, as you are trying to prevent signup based on client side data. Starting point should be https://github.com/joscha/play-authenticate/blob/master/samples/java/play-authenticate-usage/app/views/signup.scala.html and https://github.com/joscha/play-authenticate/blob/master/samples/java/play-authenticate-usage/app/controllers/Application.java#L81

slimandslam commented 9 years ago

https://github.com/joscha/play-authenticate/pull/241