capjs support

[kszymukowicz]

hi

have you seen this project?
https://capjs.js.org/

What do you think about it?
Do you consider integrating this into your extension?

Tnx!

[thomasrawiel]

Hi @kszymukowicz

Yes, I have seen this project and I'm currently not considering integrating it into powermailcaptcha.
The goal of powermailcaptcha is to make integrating captchas with powermail easier for anyone.

In comparision e.g. to hcaptcha or friendlycaptcha, CapJS

• Does not provide a built-in server-side API for validation.
• Protection relies on client-side generated data (like a capjs_token) that includes a signature or fingerprint.
• You must implement the verification logic yourself on the server, e.g., by validating an HMAC or checking timing/behavior patterns.
• There is no central validation server — CapJS is purely client-based, so you are responsible for interpreting and validating the client’s response.

So in my opinion that just doesn't fit with the current server side validation approach.
I'm open for discussion though, if you could provide a PR.

[kszymukowicz]

You right. Lack of easy access to server side is killer here.

[kszymukowicz]

And what do you think of https://github.com/altcha-org/altcha?
They have composer library for challange check.

There is some POW implementation for powermail
https://github.com/599media/fnn_powermail_altcha

and some implementation for ext:form also:
https://github.com/bbysaeth/typo3-altcha