goauthentik / goauthentik/authentik

Score-based captcha misconfiguration and invalid-score handling

Open
#25,326 0 comments 0 reactions 0 assignees View on GitHub
bug bug/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

## What

score-based captcha (reCAPTCHA) misconfiguration/errors (invalid key type / Error on Invalid Score broken).

## Want

- Score-based captcha (reCAPTCHA) misconfiguration/errors (invalid key type / Error on Invalid Score broken)

## Ideas this came from

- [#17870 reCAPTCHA ERROR for site owner: Invalid key type](https://github.com/goauthentik/authentik/issues/17870) — Hello, I've tried all possible ways to activate reCAPTCHA, but I always get the error message above. Settings from here: https://docs.goauthentik.io/add-secure-
- [#24288 "Error on Invalid Score" for score based captchas appears broken, at least for reCAPTCHA v3](https://github.com/goauthentik/authentik/issues/24288) — I've been having an on-and-off issue with logging into my instance on certain machines/browsers that I finally pinned down as being at the fault of the captcha

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the behavior described in linked issues #17870 and #24288, then locate the score-based captcha configuration and validation entry points. Reproduce the invalid-key-type and invalid-score cases; done means both reCAPTCHA misconfiguration errors and the configured invalid-score behavior work reliably.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.