Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      story #9846 add a captcha to the register page
    Actions
    Summary
    Empty
    add a captcha to the register page
    Site administrators of Tuleap instances exposed on the internet are not flooded by pending users.
    • This feature is available in a dedicated plugin
    • A captcha is added on the register page and must be validated to take a registration into account
    • A dedicated section is available in the site administration to configure the plugin (API key, captcha difficulty...)
    Empty
    Empty
    Status
    Empty
    Done
    Development
    • [ ] Does it involves User Interface? 
    • [ ] Are there any mockups?
    • [ ] Are permissions checked?
    • [ ] Does it need Javascript development?
    • [ ] Does it need a forge upgrade bucket?
    • [ ] Does it need to execute things in system events?
    • [ ] Does it impact project creation (templates)?
    • [ ] Is it exploratory?
    Proposed solution is to use Google reCaptcha as a first step. While being a centralized solution, vendor specific and requiring that the Tuleap instance access the internet it is easy to implement and to setup.

    Documentation: https://developers.google.com/recaptcha/intro
    Details
    #9846
    Thomas Gerbet (tgerbet)
    2017-02-24 14:50
    2017-01-09 18:18
    10117

    References
    Artifact links
    Empty
    Referencing story #9846

    Artifact Tracker v5

    rel #9841 9.5
    request #11592 Captcha plugin makes use of 3rd party service without explicit consent of user

    Git commit

    tuleap/tuleap/stable

    Introduce captcha plugin 320c079f10
    User avatar Thomas Gerbet (tgerbet) , 2017-01-09 23:02
    Display a captcha on the register page 0779cd1cf6
    User avatar Thomas Gerbet (tgerbet) , 2017-01-25 09:55
    Process the captcha on the register page 7f129362f3
    User avatar Thomas Gerbet (tgerbet) , 2017-01-25 22:25
    Use user's recaptcha keys 19ae8543da
    User avatar Thomas Gerbet (tgerbet) , 2017-01-27 16:56
    Improve the error message when the captcha verification fail da6b1fb8f3
    User avatar Thomas Gerbet (tgerbet) , 2017-02-03 14:31
    Build the RPM for the captcha plugin 0a91c5138c
    User avatar Thomas Gerbet (tgerbet) , 2017-02-06 09:42
    CSP script whitelist managed by plugins does not take into account ade7350771
    User avatar Thomas Gerbet (tgerbet) , 2017-02-10 14:00
    reCAPTCHA keys can be configured in the site administration UI e898a4d1a7
    User avatar Thomas Gerbet (tgerbet) , 2017-02-22 14:57
    Super user is not a robot b4bb4353a4
    User avatar Nicolas Terray (nterray) , 2017-02-24 14:06
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2017-01-09 18:19
    • Acceptance criteria
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes