xXx

Hexid M1n1 5h3ll MobiLe

C:/inetpub/vhosts/scimanuscript.com/prod/src/utils/_[ Writable ]

File:C:/inetpub/vhosts/scimanuscript.com/prod/src/utils/recaptcha.js

import https from 'https';
import { logger } from './logger.js';

const DISABLED = (process.env.RECAPTCHA_DISABLED || '').toLowerCase() === '1';
const SITE_KEY = DISABLED ? '' : (process.env.RECAPTCHA_SITE_KEY || '');
const SECRET_KEY = DISABLED ? '' : (process.env.RECAPTCHA_SECRET_KEY || '');
const FORCE_FAIL = (process.env.RECAPTCHA_FORCE_FAIL || '').toLowerCase() === '1';
const MAX_TOKEN_AGE_MS = parseInt(process.env.RECAPTCHA_MAX_TOKEN_AGE_MS || '120000', 10); // default 2 minutes
const DEBUG = (process.env.RECAPTCHA_DEBUG || '').toLowerCase() === '1';
const DISABLE_AGE_CHECK = (process.env.RECAPTCHA_DISABLE_AGE_CHECK || '').toLowerCase() === '1';

// Verify invisible/checkbox v2
export async function verifyRecaptcha({ token, ip }) {
  if(DISABLED){
    return { success:true, skipped:true, disabled:true, mode:'v2' };
  }
  if(!SECRET_KEY){
    // If not configured treat as pass (or choose to fail). Keeping pass to avoid blocking form in dev.
    return { success:true, skipped:true, mode:'v2' };
  }
  if(!token){
    return { success:false, reason:'missing_token', mode:'v2' };
  }
  if(FORCE_FAIL){
    return { success:false, reason:'forced_fail', mode:'v2' };
  }
  const trimmedToken = (token || '').trim();
  // A valid v2 token is typically > 100 chars. Length < 50 almost certainly means empty placeholder/newline.
  if(trimmedToken.length < 50){
    return { success:false, reason:'token_too_short', mode:'v2', tokenLength: trimmedToken.length };
  }
  const postData = new URLSearchParams({
    secret: SECRET_KEY,
    response: trimmedToken,
    remoteip: ip || ''
  }).toString();
  try {
    const res = await httpRequest({
      host: 'www.google.com',
      method: 'POST',
      path: '/recaptcha/api/siteverify',
      headers: { 'Content-Type': 'application/x-www-form-urlencoded', 'Content-Length': Buffer.byteLength(postData) }
    }, postData);
    let json;
    try { json = JSON.parse(res); } catch(e){ return { success:false, reason:'parse_error', mode:'v2' }; }
    if(!json.success){
      const codes = json['error-codes'] || [];
      if(codes.length){
        logger.warn(`reCAPTCHA fail codes=${codes.join(',')} tokenLen=${(token||'').length}`);
      }
      if(DEBUG){
        logger.debug?.('reCAPTCHA raw response (debug)', json);
      }
    }
    const challengeTs = json.challenge_ts ? Date.parse(json.challenge_ts) : null;
    let ageMs = null;
    let ageOk = true;
    if(challengeTs && !isNaN(challengeTs)){
      const serverNow = Date.now();
      ageMs = serverNow - challengeTs;
      ageOk = DISABLE_AGE_CHECK || ageMs <= MAX_TOKEN_AGE_MS;
      if(DEBUG){
        const skewMs = Math.abs(ageMs) > 3600000 ? ageMs : null; // highlight if >1h difference
        logger.debug?.(`reCAPTCHA timing debug ageMs=${ageMs} maxAgeMs=${MAX_TOKEN_AGE_MS} ageOk=${ageOk} disableAgeCheck=${DISABLE_AGE_CHECK} challenge_ts='${json.challenge_ts}' server_now_iso='${new Date(serverNow).toISOString()}'${skewMs!==null?` skewWarningMs=${skewMs}`:''}`);
      }
    }
    const success = !!json.success && ageOk;
    if(!success && json.success && !ageOk){
      // Our local age check failed though Google accepted the token
      return { success:false, reason:'token_age_exceeded', raw: json, mode:'v2', ageMs, ageOk, maxAgeMs: MAX_TOKEN_AGE_MS };
    }
    return { success, raw: json, mode:'v2', ageMs, ageOk, maxAgeMs: MAX_TOKEN_AGE_MS };
  } catch(err){
    logger.error('reCAPTCHA request error', err);
    return { success:false, reason:'request_error', mode:'v2' };
  }
}

function httpRequest(options, body){
  return new Promise((resolve, reject) => {
    const req = https.request(options, res => {
      let data='';
      res.on('data', d => data += d);
      res.on('end', () => resolve(data));
    });
    req.on('error', reject);
    if(body) req.write(body);
    req.end();
  });
}

export function getRecaptchaRenderContext(){
  return { siteKey: SITE_KEY, disabled: DISABLED };
}

Your Access Expired	Date. in : 09-11-2026
Regist : 09-12-2024	Expired : 01-12-2027