summary refs log tree commit diff
path: root/src/api/util
diff options
context:
space:
mode:
authorTheArcaneBrony <myrainbowdash949@gmail.com>2022-08-24 20:40:13 +0200
committerGitHub <noreply@github.com>2022-08-24 20:40:13 +0200
commite1b313bd1be0feee59bfe3646e1ba8348c08cdc1 (patch)
treed77142c009e9c6d45390a8fe01c9aee966d7a4cc /src/api/util
parentcase insensitive header for rate limits, fix rate limit default settings (diff)
parentMerge remote-tracking branch 'upstream/staging' into feat/captchaVerify (diff)
downloadserver-e1b313bd1be0feee59bfe3646e1ba8348c08cdc1.tar.xz
Merge pull request #799 from MaddyUnderStars/feat/captchaVerify
Captcha verification
Diffstat (limited to 'src/api/util')
-rw-r--r--src/api/util/index.ts1
-rw-r--r--src/api/util/utility/captcha.ts46
2 files changed, 47 insertions, 0 deletions
diff --git a/src/api/util/index.ts b/src/api/util/index.ts
index 76db5fd0..31e75325 100644
--- a/src/api/util/index.ts
+++ b/src/api/util/index.ts
@@ -7,3 +7,4 @@ export * from "./utility/ipAddress";
 export * from "./utility/passwordStrength";
 export * from "./utility/RandomInviteID";
 export * from "./utility/String";
+export * from "./utility/captcha";
\ No newline at end of file
diff --git a/src/api/util/utility/captcha.ts b/src/api/util/utility/captcha.ts
new file mode 100644
index 00000000..739647d2
--- /dev/null
+++ b/src/api/util/utility/captcha.ts
@@ -0,0 +1,46 @@
+import { Config } from "@fosscord/util";
+import fetch from "node-fetch";
+
+export interface hcaptchaResponse {
+	success: boolean;
+	challenge_ts: string;
+	hostname: string;
+	credit: boolean;
+	"error-codes": string[];
+	score: number;	// enterprise only
+	score_reason: string[];	// enterprise only
+}
+
+export interface recaptchaResponse {
+	success: boolean;
+	score: number; // between 0 - 1
+	action: string;
+	challenge_ts: string;
+	hostname: string;
+	"error-codes"?: string[];
+}
+
+const verifyEndpoints = {
+	hcaptcha: "https://hcaptcha.com/siteverify",
+	recaptcha: "https://www.google.com/recaptcha/api/siteverify",
+}
+
+export async function verifyCaptcha(response: string, ip?: string) {
+	const { security } = Config.get();
+	const { service, secret, sitekey } = security.captcha;
+
+	if (!service) throw new Error("Cannot verify captcha without service");
+
+	const res = await fetch(verifyEndpoints[service], {
+		method: "POST",
+		headers: {
+			"Content-Type": "application/x-www-form-urlencoded",
+		},
+		body: `response=${encodeURIComponent(response)}`
+			+ `&secret=${encodeURIComponent(secret!)}`
+			+ `&sitekey=${encodeURIComponent(sitekey!)}`
+			+ (ip ? `&remoteip=${encodeURIComponent(ip!)}` : ""),
+	});
+
+	return await res.json() as hcaptchaResponse | recaptchaResponse;
+}
\ No newline at end of file