[FIX] auth_signup_verify_email: Use reCaptcha

OCA · Mar 11, 2025 · f2b0fa6 · f2b0fa6
1 parent 68a5523
commit f2b0fa6
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/auth_signup_verify_email/__manifest__.py b/auth_signup_verify_email/__manifest__.py
@@ -3,7 +3,7 @@
 {
     "name": "Verify email at signup",
     "summary": "Force uninvited users to use a good email for signup",
-    "version": "17.0.1.0.0",
+    "version": "17.0.1.0.1",
     "category": "Authentication",
     "website": "https://github.com/OCA/server-auth",
     "author": "Antiun Ingeniería S.L., "

diff --git a/auth_signup_verify_email/controllers/main.py b/auth_signup_verify_email/controllers/main.py
@@ -6,6 +6,7 @@
 from email_validator import EmailSyntaxError, EmailUndeliverableError, validate_email
 
 from odoo import _
+from odoo.exceptions import UserError
 from odoo.http import request, route
 
 from odoo.addons.auth_signup.controllers.main import AuthSignupHome
@@ -26,6 +27,8 @@ def passwordless_signup(self):
 
         # Check good format of e-mail
         try:
+            if not request.env["ir.http"]._verify_request_recaptcha_token("signup"):
+                raise UserError(_("Suspicious activity detected by Google reCaptcha."))
             validate_email(values.get("login", ""))
         except EmailSyntaxError as error:
             qcontext["error"] = getattr(