add recaptcha

app.py

@@ -18,6 +18,8 @@ dotenv.load_dotenv()
 openai_api_key = os.getenv("OPENAI_API_KEY")
 discord_webhook_url_public = os.getenv("DISCORD_WEBHOOK_URL_PUBLIC")
 discord_webhook_url_easy = os.getenv("DISCORD_WEBHOOK_URL_EASY")
+captcha_site_key = os.getenv("CAPTCHA_SITE_KEY", "6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI")
+captcha_secret_key = os.getenv("CAPTCHA_SECRET_KEY", "6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe")
 
 secret_key = os.getenv("CTF_SECRET_KEY", "ctf_secret_key")
 hard_challenge_secret = os.getenv("HARD_CHALLENGE_SECRET", "hard_challenge_secret")
@@ -228,11 +230,27 @@ def summary_ch_easy(webhook_url, disable_discord, username, state):
     return result
 
 
-def summary_ch_hard(webhook_url, disable_discord, username, state):
+def summary_ch_hard(g_recaptcha_response, webhook_url, disable_discord, username, state):
     if len(username) > 50:
-        return "Error: Username too long (max 50 characters)"
+        gr.Warning("Username too long (max 50 characters)")
+        return
     if len(state.iloc[-1].iloc[-1]) > 1024:
-        return "Error: Feedback too long (max 1024 characters)"
+        gr.Warning("Feedback too long (max 1024 characters)")
+        return
+    if not g_recaptcha_response:
+        gr.Warning("Please complete the reCAPTCHA challenge")
+        return
+    try:
+        r = requests.post(
+            "https://www.google.com/recaptcha/api/siteverify",
+            data={"secret": captcha_secret_key, "response": g_recaptcha_response},
+        )
+        r.raise_for_status()
+        if not r.json().get("success"):
+            raise Exception("reCAPTCHA challenge failed")
+    except Exception as e:
+        gr.Warning(f"Error: {e}")
+        return
     result = summary(webhook_url, disable_discord, Env.CHALLENGE_HARD, username, state)
     gr.Info("Feedback submitted successfully!")
     return result
@@ -246,6 +264,11 @@ js_code = """
     globalThis.getStorage = (key, value)=>{
         return localStorage.getItem(key) || ''
     }
+    let captcha = document.createElement('script');
+    captcha.src = 'https://www.google.com/recaptcha/api.js';
+    captcha.async = true;
+    captcha.defer = true;
+    document.head.appendChild(captcha);
     const discord_webhook =  getStorage('discord_webhook')
     return [discord_webhook];
 })
@@ -258,6 +281,10 @@ css = """
 }
 """
 
+recaptcha_html = (
+    f"""<div class="g-recaptcha" data-sitekey="{captcha_site_key}"></div>"""
+)
+
 with gr.Blocks(
     title="Security Challenge Summer 2024 - invariantlabs.ai",
     theme=gr.themes.Soft(font="NeueMontreal"),
@@ -359,6 +386,12 @@ with gr.Blocks(
                     info="Use your Discord username. Will be used to validate solutions.",
                 )
                 feedback_ch_hard = gr.Textbox(label="Feedback")
+                g_recaptcha_response = gr.Textbox(
+                    label="reCAPTCHA Response",
+                    visible=False,
+                    elem_id="g_recaptcha_response",
+                )
+        gr.HTML(recaptcha_html)
 
         generate_summary_ch_hard = gr.Button("Submit")
 
@@ -419,7 +452,13 @@ with gr.Blocks(
     )
     generate_summary_ch_hard.click(
         summary_ch_hard,
-        inputs=[discord_webhook, disable_discord, discord_username_ch_easy, hard_state],
+        inputs=[
+            g_recaptcha_response,
+            discord_webhook,
+            disable_discord,
+            discord_username_ch_hard,
+            hard_state,
+        ],
         outputs=None,
     )