1. Hans-Dieter Schlabritz trying to sign up

Hi other Admins that know more about this stuff than me

Passed on from email

Hans-Dieter said...

Hello,

I'm writing here because I cannot register on the forum, so I have no way to report this there. Issue creation on the euweb repository is restricted, so that route is closed too.

### Problem

Creating an account at https://openeuphoria.org/user/signup.wc always fails. The reCAPTCHA widget loads and solves normally, but submitting the form returns:

recaptcha: reCAPTCHA validation failed.

I have been trying on and off for several weeks, from different browsers and different networks. The result is always identical.

### Analysis

Looking at source/user.e in the euweb repository, validate_do_signup() produces this specific message only when validate_recaptcha() returns a negative value. That happens in exactly three cases:

-1 curl_easy_perform() did not return CURLE_OK
-2 jsmn_value() could not parse the response body
-3 the "success" key was missing from the parsed JSON

All three are failures of the server-side verify request to Google, not of the token submitted by the browser. Worth noting: a wrong or mismatched secret key would NOT produce this message. Google would still return well-formed JSON with success: false, which maps to status 0 and the different message "reCAPTCHA response incorrect."

So this looks like something on the server rather than anything a user can work around.

### Suggestions

Things that might be worth checking:

- Outbound HTTPS connectivity from the host to RECAPTCHA_VERIFY_URL
- CA bundle and TLS support in the libcurl version behind the eucurl binding; a missing or outdated CA store is a common cause of curl_easy_perform() failing here
- Whether RECAPTCHA_VERIFY_URL still points at a current endpoint (https://www.google.com/recaptcha/api/siteverify)
- Whether this regressed with the migration to DigitalOcean

Temporarily logging the return code and the raw response body would immediately distinguish -1 from -2 and -3.

I'd be glad to test again at any time, or to have an account created manually if that is easier. Thanks for maintaining all of this.

Best regards, Hans-Dieter Schlabritz [email withheld]

Cheers Chris

new topic     » topic index » view message » categorize

2. Re: Hans-Dieter Schlabritz trying to sign up

Thanks Chris. I got the email and passed it on to Jim, who's investigating the CAPTCHA problem.

-Greg

new topic     » goto parent     » topic index » view message » categorize

Search



Quick Links

User menu

Not signed in.

Misc Menu