
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
ilandev.AspNetCore.reCAPTCHA
Advanced tools
A reCAPTCHA v3 verification client for easy token verification.
A simple reCAPTCHA v3 verification client for ASP.NET Core.
builder.Services.AddRecaptcha()
and either pass in a configuration action to configure the middleware, or builder.Configuration
to read the default configuration at the Recaptcha
configuration section.// Reads from the "Recaptcha" configuration section
builder.Services.AddRecaptcha(builder.Configuration);
// or..
builder.Services.AddRecaptcha(opts =>
{
opts.SecretKey = "your secret key";
});
// in your controller..
public class MyController(IRecaptchaClient recaptchaClient) : ControllerBase
{
[HttpPost("register")]
public async Task Register([FromBody] RegisterModel model, CancellationToken cancellationToken)
{
var recaptchaResponse = await recaptchaClient.VerifyAsync(
model.Token,
HttpContext.Connection.RemoteIpAddress, // optional
cancellationToken
);
if (!recaptchaResponse.Success)
{
// handle the error
}
// continue with registration
}
}
Configuration | Default Value | Details |
---|---|---|
TokenVerifyUrl | https://www.google.com/recaptcha/api/siteverify | The reCAPTCHA v3 verification endpoint. |
SecretKey | Your reCAPTCHA v3 secret key, found in the Google Cloud Console. | |
ThrowOnError | false | If true, will throw a RecaptchaVerificationException when token verification fails. |
FAQs
A reCAPTCHA v3 verification client for easy token verification.
We found that ilandev.aspnetcore.recaptcha demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.