Skip to content

captchaExpiryTimeLimit in secs? #100

Answered by hrj
kringo asked this question in Q&A
Discussion options

You must be logged in to vote

Please feel free to ask more questions. Copying my answer from my previous reply:

Are you re-attempting with the same token? That will always fail, otherwise bots will get multiple chances to try different guesses for the same token. After a failed attempt you need to ask the API for a fresh CAPTCHA challenge.

The way this works is:
The server maintains a set of CAPTCHA challenges. When a new captcha is requested from the API, it creates a UUID for the challenge that can only be attempted once. After an attempt is made for that UUID, that UUID is deleted, and internally an attempt count is incremented for the CAPTCHA.

When a CAPTCHA has been attempted many times (according to the internal…

Replies: 3 comments

Comment options

You must be logged in to vote
0 replies
Answer selected by kringo
Comment options

You must be logged in to vote
0 replies
Comment options

You must be logged in to vote
0 replies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants
Converted from issue

This discussion was converted from issue #99 on December 02, 2021 06:36.