Paul Nothaft
6eb46d8c31
- errorResponse(res, error, status, publicMessage) in routeHelpers,
wired into 125 catch blocks across 10 route files; wire format
({ error: <string> }) unchanged byte-for-byte
- Replace remaining console.* with logger across src (178 sites);
3 intentional console sites kept (install boot, unbound .catch ref)
- Adopt getPagination in 6 routes where semantics match exactly
59 lines
1.6 KiB
JavaScript
59 lines
1.6 KiB
JavaScript
const axios = require('axios');
|
|
const { db } = require('../database/db');
|
|
const logger = require('../utils/logger');
|
|
|
|
async function verifyRecaptcha(token) {
|
|
// Check if reCAPTCHA is enabled
|
|
const settings = await db('app_settings')
|
|
.whereIn('setting_key', ['security_enable_recaptcha', 'security_recaptcha_secret_key'])
|
|
.select('setting_key', 'setting_value');
|
|
|
|
const settingsMap = {};
|
|
settings.forEach(setting => {
|
|
try {
|
|
settingsMap[setting.setting_key] = JSON.parse(setting.setting_value);
|
|
} catch (e) {
|
|
settingsMap[setting.setting_key] = setting.setting_value;
|
|
}
|
|
});
|
|
|
|
const isEnabled = settingsMap.security_enable_recaptcha === true ||
|
|
settingsMap.security_enable_recaptcha === 'true';
|
|
const secretKey = settingsMap.security_recaptcha_secret_key;
|
|
|
|
// If reCAPTCHA is not enabled, always return true
|
|
if (!isEnabled) {
|
|
return true;
|
|
}
|
|
|
|
// If enabled but no token provided, fail
|
|
if (!token) {
|
|
return false;
|
|
}
|
|
|
|
// If no secret key configured, fail closed
|
|
if (!secretKey) {
|
|
logger.warn('reCAPTCHA enabled but no secret key configured — blocking request');
|
|
return false;
|
|
}
|
|
|
|
try {
|
|
const response = await axios.post(
|
|
'https://www.google.com/recaptcha/api/siteverify',
|
|
null,
|
|
{
|
|
params: {
|
|
secret: secretKey,
|
|
response: token
|
|
}
|
|
}
|
|
);
|
|
|
|
return response.data.success === true;
|
|
} catch (error) {
|
|
logger.error('reCAPTCHA verification error:', error);
|
|
return false;
|
|
}
|
|
}
|
|
|
|
module.exports = { verifyRecaptcha }; |