<%: Title %>.
6 |Your application description page.
7 |Use this area to provide additional information.
8 |<%: Title %>.
6 |Your contact page.
7 | 8 | One Microsoft Way9 | Redmond, WA 98052-6399
10 | P: 11 | 425.555.0100 12 | 13 | 14 | 15 | Support: Support@example.com
16 | Marketing: Marketing@example.com 17 | 18 |
BitArmory.ReCaptcha example for WebForms and .NET Full Framework 4.5+
12 |13 | This example demonstrates how to use reCAPTCHA v3 for WebForms. 14 |
15 | 16 |Implementation Notes:
17 |-
18 |
- To get this demo to work, replace the CaptchaSettings static class SiteKey and SecretKey values inside Default.aspx.cs with your own values you obtain in your admin console. Be sure to add `localhost` to the list of domains that are allowed to use your keys. 19 |
- Ensure the page has Async='true' page directive. See Default.aspx. 20 |
- Take note of the script tag in Site.Master in the head tag of Site.Master page that pulls in reCAPTCHA using your site's key. 21 |
- Each page on your website should execute grecaptcha.execute even if they do nothing or do not process any HTTP backs or button clicks. See About.aspx and Contact.aspx page for examples. 22 |
- When you're ready to validate some action, you'll need to transfer a "client token" from the user's browser to the server to validate that action. This is done using a hidden field named `clientToken`. See Default.aspx for how this is done. 23 |
- grecaptcha.execute actions may only contain alphanumeric characters and slashes, and must not be user-specific. 24 |
27 |
29 | 30 | Please enter a message blow and click the "Submit and Validate Captcha" to perform validation on the server. 31 |
32 |
33 |
37 |
3 | <%: CurrentView %> view | Switch to <%: AlternateView %>
4 |
--------------------------------------------------------------------------------
/Examples/ReCaptchaV3.WebForms/ReCaptchaV3.WebForms/ViewSwitcher.ascx.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.Linq;
4 | using System.Web;
5 | using System.Web.Routing;
6 | using System.Web.UI;
7 | using System.Web.UI.WebControls;
8 | using Microsoft.AspNet.FriendlyUrls.Resolvers;
9 |
10 | namespace ReCaptchaV3.WebForms
11 | {
12 | public partial class ViewSwitcher : System.Web.UI.UserControl
13 | {
14 | protected string CurrentView { get; private set; }
15 |
16 | protected string AlternateView { get; private set; }
17 |
18 | protected string SwitchUrl { get; private set; }
19 |
20 | protected void Page_Load(object sender, EventArgs e)
21 | {
22 | // Determine current view
23 | var isMobile = WebFormsFriendlyUrlResolver.IsMobileView(new HttpContextWrapper(Context));
24 | CurrentView = isMobile ? "Mobile" : "Desktop";
25 |
26 | // Determine alternate view
27 | AlternateView = isMobile ? "Desktop" : "Mobile";
28 |
29 | // Create switch URL from the route, e.g. ~/__FriendlyUrls_SwitchView/Mobile?ReturnUrl=/Page
30 | var switchViewRouteName = "AspNet.FriendlyUrls.SwitchView";
31 | var switchViewRoute = RouteTable.Routes[switchViewRouteName];
32 | if (switchViewRoute == null)
33 | {
34 | // Friendly URLs is not enabled or the name of the switch view route is out of sync
35 | this.Visible = false;
36 | return;
37 | }
38 | var url = GetRouteUrl(switchViewRouteName, new { view = AlternateView, __FriendlyUrls_SwitchViews = true });
39 | url += "?ReturnUrl=" + HttpUtility.UrlEncode(Request.RawUrl);
40 | SwitchUrl = url;
41 | }
42 | }
43 | }
--------------------------------------------------------------------------------
/Examples/ReCaptchaV3.WebForms/ReCaptchaV3.WebForms/ViewSwitcher.ascx.designer.cs:
--------------------------------------------------------------------------------
1 | //------------------------------------------------------------------------------
2 | // 
2 |
3 | BitArmory.ReCaptcha for .NET and C#
4 | ===================================
5 |
6 | Project Description
7 | -------------------
8 | :recycle: A minimal, no-drama, friction-less **C#** **HTTP** verification client for **Google**'s [**reCAPTCHA** API](https://www.google.com/recaptcha).
9 |
10 | :loudspeaker: ***HEY!*** Be sure to checkout these other captcha integrations:
11 |
12 | * [**BitArmory.Turnstile**](https://github.com/BitArmory/Turnstile) - Cloudflare's captcha verification service; a good alternative to Google's reCAPTCHA!
13 |
14 | The problem with current **ReCaptcha** libraries in **.NET** is that all of them take a hard dependency on the underlying web framework like **ASP.NET WebForms**, **ASP.NET MVC 5**, **ASP.NET Core**, or **ASP.NET Razor Pages**.
15 |
16 | Furthermore, current **reCAPTCHA** libraries for **.NET** are hard coded against the `HttpContext.Request` to retrieve the remote IP address of the visitor. Unfortunately, this method doesn't work if your website is behind a service like **CloudFlare** where the [`CF-Connecting-IP` header value](https://support.cloudflare.com/hc/en-us/articles/200170986-How-does-Cloudflare-handle-HTTP-Request-headers) is the ***real*** IP address of the visitor on your site.
17 |
18 | **BitArmory.ReCaptcha** is a minimal library that works across all **.NET** web frameworks without taking a hard dependency on any web framework. If you want to leverage platform specific features, like **MVC** ***Action Filters***, you'll need to implement your own `ActionFilter` that leverages the functionality in this library.
19 |
20 | #### Supported Platforms
21 | * **.NET Standard 1.3** or later
22 | * **.NET Framework 4.5** or later
23 |
24 | #### Supported reCAPTCHA Versions
25 | * [**reCAPTCHA v2 (I'm not a robot)**][2]
26 | * [**reCAPTCHA v3 (Invisible)**][3]
27 |
28 | #### Crypto Tip Jar
29 | 
30 | * :dog2: **Dogecoin**: `DGVC2drEMt41sEzEHSsiE3VTrgsQxGn5qe`
31 |
32 |
33 | ### Download & Install
34 | **NuGet Package [BitArmory.ReCaptcha](https://www.nuget.org/packages/BitArmory.ReCaptcha/)**
35 |
36 | ```powershell
37 | Install-Package BitArmory.ReCaptcha
38 | ```
39 |
40 | Full Examples
41 | --------
42 | Various full and complete examples can be found here:
43 |
44 | #### reCAPTCHA v3 (Invisible)
45 | * [ASP.NET WebForms for Full Framework](https://github.com/BitArmory/ReCaptcha/tree/master/Examples/ReCaptchaV3.WebForms)
46 |
47 |
48 | General Usage
49 | -------------
50 | ### Getting Started
51 | You'll need to create **reCAPTCHA** account. You can sign up [here](https://www.google.com/recaptcha)! After you sign up and setup your domain, you'll have two important pieces of information:
52 | 1. Your `site` key
53 | 2. Your `secret` key
54 |
55 | This library supports both:
56 | * [**reCAPTCHA v2 (I'm not a robot)**][2]
57 | * [**reCAPTCHA v3 (Invisible)**][3].
58 |
59 |
60 | ## reCAPTCHA v3 (Invisible)
61 | ### Client-side Setup
62 |
63 | Be sure to checkout [this video that describes how reCAPTCHA v3 works](https://www.youtube.com/watch?v=tbvxFW4UJdU) before implementing.
64 |
65 | Then, on every page of your website, add the following JavaScript:
66 | ```html
67 |
68 |
69 |
70 |
71 |
72 | ...
73 |
78 |
79 |
80 | ```
81 | Every page should call `grecaptcha.execute` with some unique **action** `TAG`. [Read more about actions in the official docs here](https://developers.google.com/recaptcha/docs/v3#actions).
82 |
83 | When it is time to validate an **HTTP** `POST` you'll need transfer the captcha `token` in the browser to a hidden HTML form field as shown below:
84 |
85 | ```html
86 |
87 |
88 |
91 |
106 |
107 |
108 | ```
109 | You'll need to execute `ExecuteReCaptcha_OnSome_ButtonAction()` function the moment the user decides to submit your form. Otherwise, if you run `grecaptcha.*` code during page load, the token being copied to the hidden field can expire after a few minutes. This means, if the user takes a long time filling out a form, the token copied at page load can expire and your server will validate an expired token by the time the form is submitted resulting in a failed captcha verification.
110 |
111 | Therefore, you should execute the `ExecuteReCaptcha_OnSome_ButtonAction()` function on some `onclick=` event to get a fresh token before the form is submitted.
112 |
113 | Also, keep in mind, `grecaptcha.execute()` returns a **JavaScript Promise**. You won't have a valid token in your `