Android recaptcha：验证用户的反应：所有的功能都必须称为客户端！我可以使用我的后端吗？

Question

获取reCAPTCHA用户响应令牌，必须通过调用Verify the user's response中描述的siteverify方法来验证该令牌。

如果reCAPTCHA确信这是一个真实设备上的真实用户，那么它将返回一个令牌，没有任何疑问。否则，它将在返回令牌之前提供一个视觉/音频挑战来证明用户的人性化。

exports.verifyRecaptcha = functions.https.onRequest((request, response) => {

    const user_response_token = request.query.user_response_token;
    if(user_response_token == '') {
        throw new functions.https.HttpsError('invalid-argument', 'The function must be called with an adequat user response token.');
    }
    
    const remote_url = 'https://www.google.com/recaptcha/api/siteverify';
    const secret = null;
    request.post({url: remote_url, form:{secret: secret, response: user_response_token}}, function(error, response, body) {
        if(error) {
            throw new functions.https.HttpsError('unknown', error);
        }

        if(!response.statusCode != 200) {
            throw new functions.https.HttpsError('unknown', 'Something went wrong. Status code: ' + response.statusCode + '.');
        }

        if(!body.success) {
            throw new functions.https.HttpsError('unknown', 'Unable to verify this captcha.');
        }

        return response;    
    });

});

Answer 1

您可以获取从GetTokenResult()返回的令牌，将其发送到后端，并让后端调用SiteVerify的web API版本：

https://www.google.com/recaptcha/api/siteverify