better-auth
Version:
The most comprehensive authentication framework for TypeScript.
81 lines (80 loc) • 3.33 kB
JavaScript
import { PACKAGE_VERSION } from "../../version.mjs";
import { middlewareResponse } from "../../utils/middleware-response.mjs";
import { Providers, defaultEndpoints, siteVerifyMap } from "./constants.mjs";
import { EXTERNAL_ERROR_CODES, INTERNAL_ERROR_CODES } from "./error-codes.mjs";
import { captchaFox } from "./verify-handlers/captchafox.mjs";
import { cloudflareTurnstile } from "./verify-handlers/cloudflare-turnstile.mjs";
import { googleRecaptcha } from "./verify-handlers/google-recaptcha.mjs";
import { hCaptcha } from "./verify-handlers/h-captcha.mjs";
import { getIp } from "@better-auth/core/utils/ip";
//#region src/plugins/captcha/index.ts
const captcha = (options) => ({
id: "captcha",
version: PACKAGE_VERSION,
$ERROR_CODES: EXTERNAL_ERROR_CODES,
onRequest: async (request, ctx) => {
try {
const endpoints = options.endpoints?.length ? options.endpoints : defaultEndpoints;
const url = new URL(request.url);
const basePath = ctx.options.basePath ?? "/api/auth";
let pathname = url.pathname.replace(basePath, "");
if (pathname.endsWith("//")) pathname = pathname.slice(0, -1);
if (pathname.startsWith("//")) pathname = pathname.slice(1);
if (!pathname.startsWith("/")) pathname = "/" + pathname;
const exemptPaths = ["/sign-in/email-otp"].reduce((acc, curr) => {
if (options.endpoints?.length && options.endpoints.includes(curr)) return acc;
return [...acc, curr];
}, []);
if (!endpoints.some((endpoint) => {
return pathname.includes(endpoint) && !exemptPaths.some((p) => pathname.includes(p));
})) return;
if (!options.secretKey) throw new Error(INTERNAL_ERROR_CODES.MISSING_SECRET_KEY.message);
const captchaResponse = request.headers.get("x-captcha-response");
const remoteUserIP = getIp(request, ctx.options) ?? void 0;
if (!captchaResponse) return middlewareResponse({
message: EXTERNAL_ERROR_CODES.MISSING_RESPONSE.message,
code: EXTERNAL_ERROR_CODES.MISSING_RESPONSE.code,
status: 400
});
const handlerParams = {
siteVerifyURL: options.siteVerifyURLOverride || siteVerifyMap[options.provider],
captchaResponse,
secretKey: options.secretKey,
remoteIP: remoteUserIP
};
if (options.provider === Providers.CLOUDFLARE_TURNSTILE) return await cloudflareTurnstile({
...handlerParams,
expectedAction: options.expectedAction,
allowedHostnames: options.allowedHostnames
});
if (options.provider === Providers.GOOGLE_RECAPTCHA) return await googleRecaptcha({
...handlerParams,
minScore: options.minScore,
expectedAction: options.expectedAction,
allowedHostnames: options.allowedHostnames
});
if (options.provider === Providers.HCAPTCHA) return await hCaptcha({
...handlerParams,
siteKey: options.siteKey
});
if (options.provider === Providers.CAPTCHAFOX) return await captchaFox({
...handlerParams,
siteKey: options.siteKey
});
} catch (_error) {
const errorMessage = _error instanceof Error ? _error.message : void 0;
ctx.logger.error(errorMessage ?? "Unknown error", {
endpoint: request.url,
message: _error
});
return middlewareResponse({
message: EXTERNAL_ERROR_CODES.UNKNOWN_ERROR.message,
code: EXTERNAL_ERROR_CODES.UNKNOWN_ERROR.code,
status: 500
});
}
},
options
});
//#endregion
export { captcha };