Cross-origin recaptcha - Githubissues

wxyz-abcd / node-haxball

The most powerful and lightweight API that allows you to develop your original Haxball(www.haxball.com) host, client, and standalone applications both on node.js and browser environments and also includes every possible hack and functionality that you can imagine.

MIT License

34 stars 13 forks source link

Cross-origin recaptcha #24

Open wxyz-abcd opened 1 year ago

wxyz-abcd commented 1 year ago

Google's Recaptcha library is using a very strict and robust sandboxing mechanism, so showing the recaptcha inside a browser will become a problem. So, unless and until a complete automation of recaptcha solving has been accomplished;

Option1:
- Build the NW.js recaptcha project as a seperate application.
- Generate a link to open that application on mouse click.
- Try to get the recaptcha token directly from that application.
- Inform users that they can use the application to join recaptcha-protected rooms. (Quite heavy, most people would not want to download a >100mb file.)
Option 2:
- Build a Chrome plugin to modify haxball.com/headlesstoken website for client tokens also.
- Inform users that they can use the plugin to get their tokens. (Quite light, probably <100kb, but we will see how helpful it turns out to be.)

wxyz-abcd commented 1 year ago

Actually, there might be a 3rd option that requires the proxy server to respond to google requests as well as haxball requests. Proxy server's network traffic is currently limited, so it might become a problem; but still, it's a solution.