mirror of
https://github.com/bringout/oca-website.git
synced 2026-04-21 04:32:11 +02:00
77 lines
2.9 KiB
Python
77 lines
2.9 KiB
Python
# SPDX-FileCopyrightText: 2010-2014 Elico Corp
|
|
# SPDX-FileContributor: Augustin Cisterne-Kaas <augustin.cisterne-kaas@elico-corp.com>
|
|
# SPDX-FileCopyrightText: 2015 Tech-Receptives Solutions Pvt. Ltd.
|
|
# SPDX-FileCopyrightText: 2019 Simone Orsi - Camptocamp SA
|
|
# SPDX-FileCopyrightText: 2019 Coop IT Easy SC
|
|
#
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
import requests
|
|
|
|
from odoo import _, api, fields, models
|
|
|
|
RECAPTCHA_API_URL = "https://www.recaptcha.net/recaptcha/api/siteverify"
|
|
RECAPTCHA_API_TIMEOUT = 30
|
|
|
|
|
|
class Website(models.Model):
|
|
_inherit = "website"
|
|
|
|
recaptcha_v2_enabled = fields.Boolean("Enable reCAPTCHA v2")
|
|
recaptcha_v2_site_key = fields.Char("Site Key (v2)")
|
|
recaptcha_v2_secret_key = fields.Char("Secret Key (v2)")
|
|
|
|
@api.model
|
|
def _get_error_message(self, errorcode=None):
|
|
mapping = {
|
|
"missing-input-secret": _("The secret parameter is missing."),
|
|
"invalid-input-secret": _("The secret parameter is invalid or malformed."),
|
|
"missing-input-response": _("The response parameter is missing."),
|
|
"invalid-input-response": _(
|
|
"The response parameter is invalid or malformed."
|
|
),
|
|
"bad-request": _("The request is invalid or malformed."),
|
|
"timeout-or-duplicate": _(
|
|
"The response is no longer valid: either is too old or has "
|
|
"been used previously."
|
|
),
|
|
}
|
|
return mapping.get(
|
|
errorcode,
|
|
_(
|
|
"Unknown reCAPTCHA error (error code: {errorcode}).".format(
|
|
errorcode=errorcode
|
|
)
|
|
),
|
|
)
|
|
|
|
def is_recaptcha_v2_valid(self, form_values):
|
|
"""
|
|
Checks whether the reCAPTCHA v2 challenge has been correctly solved.
|
|
|
|
form_values must be a dictionary containing the form values.
|
|
|
|
Returns a (bool, str) tuple. The first element tells whether the
|
|
CAPTCHA is valid or not. The second is the error message when
|
|
applicable (or an empty string).
|
|
|
|
If reCAPTCHA is disabled in the settings, this method behaves as if
|
|
the CAPTCHA was correctly solved, but without doing any check.
|
|
"""
|
|
if not self.recaptcha_v2_enabled:
|
|
return (True, "")
|
|
response = form_values.get("g-recaptcha-response")
|
|
if not response:
|
|
return (False, _("No response given."))
|
|
get_res = {"secret": self.recaptcha_v2_secret_key, "response": response}
|
|
res = requests.post(
|
|
RECAPTCHA_API_URL, data=get_res, timeout=RECAPTCHA_API_TIMEOUT
|
|
).json()
|
|
error_msg = "\n".join(
|
|
self._get_error_message(error) for error in res.get("error-codes", [])
|
|
)
|
|
if error_msg:
|
|
return (False, error_msg)
|
|
if not res.get("success"):
|
|
return (False, _("The challenge was not successfully completed."))
|
|
return (True, "")
|