fusionauth-issues icon indicating copy to clipboard operation
fusionauth-issues copied to clipboard

Support "Private Access Tokens" to eliminate CAPTCHA

Open mooreds opened this issue 1 year ago • 0 comments

Support "Private Access Tokens" to eliminate CAPTCHA

Problem

User's don't like CAPTCHAs, but sites need it to prevent abuse by bots.

Solution

"Privacy pass" is a new standard which lets browser vendors prove that the requests are from humans, and Cloudflare calls the tokens from the standard "Private Access Tokens".

Alternatives/workarounds

A clear and concise description of any alternative solutions or workarounds you've considered.

Additional context

This is supported on ios16 and later devices at present.

CloudFlare's blog post: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/

The standard is here: https://www.ietf.org/archive/id/draft-ietf-privacypass-auth-scheme-01.html

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

How to vote

Please give us a thumbs up or thumbs down as a reaction to help us prioritize this feature. Feel free to comment if you have a particular need or comment on how this feature should work.

mooreds avatar Sep 19 '22 21:09 mooreds