authgear-server icon indicating copy to clipboard operation
authgear-server copied to clipboard

Specify Captcha support

Open louischan-oursky opened this issue 1 year ago • 8 comments

Depend on https://github.com/authgear/authgear-server/pull/4399

louischan-oursky avatar Jun 11 '24 04:06 louischan-oursky

@chpapa @pkong-ds I updated the spec according to the comments we had in the product meeting. Please have a look when you are free. cc @tung2744 @fungc-io

louischan-oursky avatar Jun 19 '24 12:06 louischan-oursky

@chpapa @pkong-ds I have updated the spec once again. The major changes are

  1. Rename captcha to bot_protection
  2. Place risk_assessment under bot_protection
  3. providers becomes provider, that is, we support only one provider at a time.

Configuration example

bot_protection:
  enabled: true
  provider:
    type: cloudflare
    site_key: "SITE_KEY"
  risk_assessment:
    enabled: true
    provider:
      type: recaptchav3
      site_key: "SITE_KEY"
      risk_score:
        low: 0.2
        medium: 0.5
        high: 0.7

authentication_flow:
  login_flows:
  - name: default
    steps:
    - type: identify
      one_of:
      - identification: email
    - type: authenticate
      one_of:
      - authentication: primary_password
        bot_protection:
          mode: "risk_level_high"
          provider:
            type: cloudflare
          risk_assessment:
            enabled: true
            provider:
              type: recaptchav3

louischan-oursky avatar Jun 20 '24 11:06 louischan-oursky

@louischan-oursky seems I don't have access to push to louischan-oursky/dev-1352-specify-captcha. Submitted a PR to your branches instead LOL. ref https://github.com/louischan-oursky/authgear-server/pull/1

Please advise if otherwise~ 🙏

pkong-ds avatar Jul 25 '24 01:07 pkong-ds

@pkong-ds I added your commit to this PR. And also added a commit to update the audit log event name.

louischan-oursky avatar Jul 25 '24 03:07 louischan-oursky

@pkong-ds I added a commit based on your changes.

@chpapa @tung2744 @fungc-io I added a commit to specify the configuration to support the behavior we discussed in the product meeting. https://github.com/authgear/authgear-server/pull/4282/commits/b8c90dcd7c056153ef7e821d812a53789d36d2aa#diff-7fa5fe90ad92ac79b786c50d705b525113599d205b1268f4d093a4249e8aeb03R60

louischan-oursky avatar Jul 26 '24 05:07 louischan-oursky

@louischan-oursky added commit for new agreed spec 🙏 https://github.com/authgear/authgear-server/pull/4282/commits/dec4edc15245a63f3f1cc11013959132cf97a96f

Preview

image

pkong-ds avatar Jul 30 '24 08:07 pkong-ds

@louischan-oursky added 2 commits to for product meeting discussion result

pkong-ds avatar Jul 30 '24 10:07 pkong-ds

@tung2744 This should be good to merge.

louischan-oursky avatar Aug 20 '24 06:08 louischan-oursky