Google Recaptcha v3 not working



  • Hello,

    I have enabled Spam Be Gone plugin to use Google Recaptcha, but I see that I only can use v2, and v3 is not working.
    When I enter v3 site and secret key, I see that the key does not work.
    I use v1.12.2 on VPS.

    Could you help me if there's something to fix at my end?


  • GNU/Linux Admin

    As far as I know ReCAPTCHA v3 should be working, I'll let @bentael know if there's been a change.


  • Gamers

    v3 is not just "a better reCAPTCHA" and it is not replacing v2.

    v3 only offers "invisible" reCAPTCHA, but even if Spam Be Gone supported that (it doesn't yet) it still wouldn't work because it passes different data.
    reCAPTCHA v2 is binary - either user is a robot or not.
    v3 doesn't just pass "true||false" but instead passes a score from 0.0 to 1.0 and it's up to the application to determine what score is a success. It also never shows user a challenge as it's not supposed to interrupt the user in any way.

    So to sum it up: for Spam Be Gone to support v3 would mean changing the way it handles reCAPTCHA and I'm not even sure if it's a good idea. v3 is supposed to continuously chceck if user is a bot without interruptions, so it's best used for frequent user actions like posting or login, not for things like registration that happen once per user and it's not a big deal if it interrupts user with a challenge. So I'd say it'd be better for Spam Be Gone to extend its functionally to use v3 on login and posting, and leave v2 on the registration page.



  • @julian said in Google Recaptcha v3 not working:

    As far as I know ReCAPTCHA v3 should be working, I'll let @bentael know if there's been a change.

    Fine, thanks.

    @oplik0 said in Google Recaptcha v3 not working:

    v3 is not just "a better reCAPTCHA" and it is not replacing v2.

    v3 only offers "invisible" reCAPTCHA, but even if Spam Be Gone supported that (it doesn't yet) it still wouldn't work because it passes different data.
    reCAPTCHA v2 is binary - either user is a robot or not.
    v3 doesn't just pass "true||false" but instead passes a score from 0.0 to 1.0 and it's up to the application to determine what score is a success. It also never shows user a challenge as it's not supposed to interrupt the user in any way.

    So to sum it up: for Spam Be Gone to support v3 would mean changing the way it handles reCAPTCHA and I'm not even sure if it's a good idea. v3 is supposed to continuously chceck if user is a bot without interruptions, so it's best used for frequent user actions like posting or login, not for things like registration that happen once per user and it's not a big deal if it interrupts user with a challenge. So I'd say it'd be better for Spam Be Gone to extend its functionally to use v3 on login and posting, and leave v2 on the registration page.

    That convinced me 🙂 Thanks a lot.
    Unfortunately I'm not a developer and do not know how to develop a plugin, but I'll highly appreciate if it's developed by anyone (NodeBB team or another mate).


Log in to reply
 

Suggested Topics

| |