Initial commit: OCA Website packages (16 packages)

odoo-bringout-oca-website-website_recaptcha_v2/website_recaptcha_v2/models/website.py

@@ -0,0 +1,77 @@
+# SPDX-FileCopyrightText: 2010-2014 Elico Corp
+# SPDX-FileContributor: Augustin Cisterne-Kaas <augustin.cisterne-kaas@elico-corp.com>
+# SPDX-FileCopyrightText: 2015 Tech-Receptives Solutions Pvt. Ltd.
+# SPDX-FileCopyrightText: 2019 Simone Orsi - Camptocamp SA
+# SPDX-FileCopyrightText: 2019 Coop IT Easy SC
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
+import requests
+
+from odoo import _, api, fields, models
+
+RECAPTCHA_API_URL = "https://www.recaptcha.net/recaptcha/api/siteverify"
+RECAPTCHA_API_TIMEOUT = 30
+
+
+class Website(models.Model):
+    _inherit = "website"
+
+    recaptcha_v2_enabled = fields.Boolean("Enable reCAPTCHA v2")
+    recaptcha_v2_site_key = fields.Char("Site Key (v2)")
+    recaptcha_v2_secret_key = fields.Char("Secret Key (v2)")
+
+    @api.model
+    def _get_error_message(self, errorcode=None):
+        mapping = {
+            "missing-input-secret": _("The secret parameter is missing."),
+            "invalid-input-secret": _("The secret parameter is invalid or malformed."),
+            "missing-input-response": _("The response parameter is missing."),
+            "invalid-input-response": _(
+                "The response parameter is invalid or malformed."
+            ),
+            "bad-request": _("The request is invalid or malformed."),
+            "timeout-or-duplicate": _(
+                "The response is no longer valid: either is too old or has "
+                "been used previously."
+            ),
+        }
+        return mapping.get(
+            errorcode,
+            _(
+                "Unknown reCAPTCHA error (error code: {errorcode}).".format(
+                    errorcode=errorcode
+                )
+            ),
+        )
+
+    def is_recaptcha_v2_valid(self, form_values):
+        """
+        Checks whether the reCAPTCHA v2 challenge has been correctly solved.
+
+        form_values must be a dictionary containing the form values.
+
+        Returns a (bool, str) tuple. The first element tells whether the
+        CAPTCHA is valid or not. The second is the error message when
+        applicable (or an empty string).
+
+        If reCAPTCHA is disabled in the settings, this method behaves as if
+        the CAPTCHA was correctly solved, but without doing any check.
+        """
+        if not self.recaptcha_v2_enabled:
+            return (True, "")
+        response = form_values.get("g-recaptcha-response")
+        if not response:
+            return (False, _("No response given."))
+        get_res = {"secret": self.recaptcha_v2_secret_key, "response": response}
+        res = requests.post(
+            RECAPTCHA_API_URL, data=get_res, timeout=RECAPTCHA_API_TIMEOUT
+        ).json()
+        error_msg = "\n".join(
+            self._get_error_message(error) for error in res.get("error-codes", [])
+        )
+        if error_msg:
+            return (False, error_msg)
+        if not res.get("success"):
+            return (False, _("The challenge was not successfully completed."))
+        return (True, "")