Client Server REST API captcha implementation

javascript php angularjs rest captcha
Vladimir Cvetic picture Vladimir Cvetic · Apr 10, 2015 · Viewed 14.2k times · Source

I'm building client server REST application. Client side is based on Angular while server is PHP (not that it matters much anyhow).

What I am wondering if there are any best practices, good examples of captcha implementation in this case? Captcha would be used for user registration etc.

I'm not limited to any specific libraries, only requirement is that there cannot be any calls to 3rd party servers on client side (js libraries hosted on 3rd party servers or req api key etc).

thanks

Answer

Daniel Aranda picture Daniel Aranda · Apr 10, 2015

When google captcha approves one user, it provides you a token.

So imagine this context. Users is about to save, and uses the captcha, the captcha does its business until approve user and gives you a token, it is all that matters.

If you want to see a "tentative" flow of requests for this.

  1. User before register passed captcha, the captcha gives you a token in the front end.
  2. User clicks save, you receive in the backend the form data and the captcha token. You ask to google through the api, does the token is real? if they said yes, you save the form, if somehow Google does not recognize it, you return an error.
  3. Front end listen for success or error and what kind of error. IF error is captcha, force a retry, get a new token.
  4. Backend receive again the form data and the new token and check again.

Related questions

AngularJS HTTP post to PHP and undefined

I have a form with the tag ng-submit="login() The function gets called fine in javascript. function LoginForm($scope, $http) { $http.defaults.headers.post['Content-Type'] = 'application/x-www-form-urlencoded; charset=UTF-8'; $scope.email = "[email protected]"; $scope.password = "1234"; $scope.login = function() { …

Read More
Ionic + Angular - How to avoid the "404 Not Found (from cache)" after POST request?

this question is partly pointing to my previous question : Ionic + Angular POST request return state 404 But i wasn't able to find working solution. Problem is following: if I do request from the mobile app running on the device i always …

Read More
How and where save uploaded files with ng-flow?

First of all, I use ng-flow (html5 file upload extension on angular.js framework) My files are uploaded, I log the event in console. But I don't understand where and how to save them. Here is my html code, upload …

Read More