OpenEuphoria

Original date:2026-08-14 18:50:12 Edited by: ghaberek Subject: Hans-Dieter Schlabritz trying to sign up

Hi other Admins that know more about this stuff than me

Passed on from email

From Hans-Dieter

Hello,

I'm writing here because I cannot register on the forum, so I have no way to report this there. Issue creation on the euweb repository is restricted, so that route is closed too.

1. 1. 1. Problem

Creating an account at https://openeuphoria.org/user/signup.wc always fails. The reCAPTCHA widget loads and solves normally, but submitting the form returns:

recaptcha: reCAPTCHA validation failed.

I have been trying on and off for several weeks, from different browsers and different networks. The result is always identical.

1. 1. 1. Analysis

Looking at source/user.e in the euweb repository, validate_do_signup() produces this specific message only when validate_recaptcha() returns a negative value. That happens in exactly three cases:

-1 curl_easy_perform() did not return CURLE_OK -2 jsmn_value() could not parse the response body -3 the "success" key was missing from the parsed JSON

All three are failures of the server-side verify request to Google, not of the token submitted by the browser. Worth noting: a wrong or mismatched secret key would NOT produce this message. Google would still return well-formed JSON with success: false, which maps to status 0 and the different message "reCAPTCHA response incorrect."

So this looks like something on the server rather than anything a user can work around.

1. 1. 1. Suggestions

Things that might be worth checking:

- Outbound HTTPS connectivity from the host to RECAPTCHA_VERIFY_URL - CA bundle and TLS support in the libcurl version behind the eucurl binding; a missing or outdated CA store is a common cause of curl_easy_perform() failing here - Whether RECAPTCHA_VERIFY_URL still points at a current endpoint (https://www.google.com/recaptcha/api/siteverify) - Whether this regressed with the migration to DigitalOcean

Temporarily logging the return code and the raw response body would immediately distinguish -1 from -2 and -3.

I'd be glad to test again at any time, or to have an account created manually if that is easier. Thanks for maintaining all of this.

Best regards, Hans-Dieter Schlabritz [email withheld]

Cheers Chris