Function verify

backend/src/utils/captcha.ts:12–36

(captcha: string)

const recaptchaSecret = process.env["RECAPTCHA_SECRET"] ?? null;

export async function verify(captcha: string): Promise<boolean> {
  if (isDevEnvironment()) {
    return true;
  }

  if (recaptchaSecret === null) {
    throw new Error("RECAPTCHA_SECRET is not defined");
  }

  const response = await fetch(
    `https://www.google.com/recaptcha/api/siteverify`,
    {
      method: "POST",
      headers: { "Content-Type": "application/x-www-form-urlencoded" },
      body: `secret=${recaptchaSecret}&response=${captcha}`,
    },
  );

  if (!response.ok) {
    return false;
  } else {
    const captchaData = (await response.json()) as CaptchaData;
    return captchaData.success;
  }
}