Add recaptach

Gemfile

@@ -43,6 +43,7 @@ gem "omniauth", "~> 2.1"
 # Use Active Model has_secure_password [https://guides.rubyonrails.org/active_model_basics.html#securepassword]
 # gem "bcrypt", "~> 3.1.7"
 gem "devise"
+gem "recaptcha"
 gem "rolify"
 gem "pundit"
 gem "graphql"

Gemfile.lock

@@ -332,6 +332,7 @@ GEM
     rake (13.2.1)
     rdoc (6.7.0)
       psych (>= 4.0.0)
+    recaptcha (5.17.0)
     redis (5.3.0)
       redis-client (>= 0.22.0)
     redis-client (0.22.2)
@@ -497,6 +498,7 @@ DEPENDENCIES
   rack-brotli
   rack-cors
   rails (~> 7.1.3)
+  recaptcha
   redis (~> 5.3)
   rolify
   rspec-rails (~> 6.1.1)

app/controllers/users/registrations_controller.rb

@@ -2,11 +2,28 @@
 
 class Users::RegistrationsController < Devise::RegistrationsController
   before_action :configure_permitted_parameters, if: :devise_controller?
-  invisible_captcha only: [:create], honeypot: :sub_name
 
   def create
-    super
-    resource.add_role(:reader)
+    build_resource(sign_up_params)
+
+    resource.save
+    yield resource if block_given?
+    if verify_recaptcha(model: resource) && resource.persisted?
+      if resource.active_for_authentication?
+        set_flash_message! :notice, :signed_up
+        sign_up(resource_name, resource)
+        respond_with resource, location: after_sign_up_path_for(resource)
+      else
+        set_flash_message! :notice, :"signed_up_but_#{resource.inactive_message}"
+        expire_data_after_sign_in!
+        respond_with resource, location: after_inactive_sign_up_path_for(resource)
+      end
+      resource.add_role(:reader)
+    else
+      clean_up_passwords resource
+      set_minimum_password_length
+      respond_with resource
+    end
   end
 
   protected

app/views/devise/registrations/new.html.erb

@@ -33,7 +33,6 @@
                             placeholder: "Email",
                             class: "appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 focus:outline-none focus:ring-purple-800 focus:border-purple-800 focus:z-10 sm:text-sm" %>
         </div>
-        <%= f.invisible_captcha :sub_name %>
         <div class="pt-2 pb-4">
           <label for="password" class="sr-only">Password</label>
           <% if @minimum_password_length %>
@@ -53,7 +52,9 @@
                                class: "appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 focus:outline-none focus:ring-purple-800 focus:border-purple-800 focus:z-10 sm:text-sm" %>
         </div>
       </div>
-
+      <div>
+        <%= recaptcha_tags %>
+      </div>
       <div>
         <p>By signing up you are agreeing to our <a href="https://winter-professor-81d.notion.site/Terms-of-Service-7a40080fe1684689890e287566f0c732" target="_blank">Terms of Service</a></p>
       </div>

config/credentials.yml.enc

@@ -1 +1 @@
-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--jOEofTIbhyw+xBQJ--FzoMN/DOK0eejuSLjkdtbw==
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--amcMeQKa2feZ8G64--4VNA8bgluTtG26KvCITWPQ==

config/credentials/production.yml.enc

@@ -1 +1 @@
-oF3EBAp0y8t02VsCugyWCGqfDwyhQsu8+tmu4LPtAHPvEt/mPPU6wTBrdcnWNqMS/Xz+y1NGK8w/WSEZp4XlgDOx8XYfT4nskSLKAQuMri0GGiK+sVaJQ+FyPDcpOzDUjxuqt+F+MD+FIfZKnNYnUi93moKZ3dGfW/4VocV1unCLKmZtkFSlG8kgp56JlIF//oR2CJv+iUWzE0MbczS/Xq11AzJnhubJGGLdI3iI5/ALJ4GKXpV2/LPbFGua2CAnBkrMJ/GLYeXXVqL4MogVTW1z+SIr01EF3nwIjWs8dLVqYn9twm87KRMcJf4IEHxbdrrKN6lAaXeaWQ5vPqFDzuIMiov2boMmwbgJ77cjXnaEQFAXRx18QZRxbJCf6LWgGcbiEAujOPqkPESVZWTX5dNXWn8t6on4pZPgePSJCZcVId4k4BT0XT5wAU2NUi7r8GKFd/iDpyp6r4i0LmNsJ96Jj3SqGwHwZYUo1RGNBKaLbFT0lidInkk+uhPAb4cE5h2rM8G4z1kcZKymYYnSgtLaPdNofSYVWBMZ9KgVHZMVsYrGL57vD26FVJPv45rLhGY/C93crt8WyC81502/Hc23U2UiGR0ISFyEpmqH9W/2D4m59sypTkaDLcPKRZvF1KG8cIGm5giPbBj+TrhqfZdIUwHzxUO5Vm/iRG3W3HLR+LWHHL+lwpf+NJhOnO/hFrvCv3oSrRDxMeHbsP/aiVN5Vk5ywnbn0cYfQaZRSMv6TACgiHkaKsSrf7CSL1dqQGg6C56mHQj1lpnxmEGCtDE9OTdr+3Vpxbq01egO3OFgn/e0a/LpMh5KlAZ+HUYsQjaMEnhNMD01biBbnBeAYLGecQcFovIJ78JgR2ip5pDn+ArxVIiwSNRzdGzsbHXlZGTKiJSa4SCUDZAOoy+CtfOzLzyrRwH2jZkyIk+eeChqI2WN7gns3fBy0HoFfb+FcvJFkQtBZwiNB1TiadPLWF88vCTYD3eVw0/z7zH0/+PHSAdLr7agc1LhLvcU9gRC0RNad0TZOCyrTeuGp5UPaqfsDTVVj4xjzNEsm7Uq1b0ssjI4+k8ghFDubYE8UNlWOYEYFr8nks7u54IFb0cUk/wrLdA+7C0wkwuECGRiHznri/TJSOt92RMq3NzBNQ==--gmNZ/i6UY8rDPRjH--oJT2li1ubTuMoxRN2c5WNA==
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--/UrT/RbXLQIzDP5p--UV6u2S6RB3nfmwgH7CKeOg==

config/initializers/recaptcha.rb

@@ -0,0 +1,4 @@
+Recaptcha.configure do |config|
+  config.site_key =  Rails.application.credentials.dig(:site_key)
+  config.secret_key = Rails.application.credentials.dig(:secret_key)
+end