express-sequelize-backend-template/middleware/captcha.js

const fetch = require("cross-fetch");

const logger = require("../utils/logger")(module);

const typedefs = require("../typedefs");

/**
 * Google ReCAPTCHA v2 verification
 * 
 * @param {typedefs.Req} req 
 * @param {typedefs.Res} res 
 * @param {typedefs.Next} next 
 */
const verifyCaptcha = async (req, res, next) => {
	try {
		const secretKey = process.env.CAPTCHA_SECRET;

		const verifyCaptchaURL = `https://google.com/recaptcha/api/siteverify?secret=${secretKey}&response=${req.body.captcha}`;

		const captchaResp = await fetch(verifyCaptchaURL);
		const captchaData = await captchaResp.json();
		if (captchaData.success !== undefined && !captchaData.success) {
			res.status(403).send({
				message: "Failed captcha verification"
			});
			logger.error("Recaptcha", { captchaData });
			return;
		}
		next();
	} catch (error) {
		res.sendStatus(500);
		logger.error("verifyCaptcha", { error });
		return;
	}
}

module.exports = {
	verifyCaptcha
};