Hi, after testing on our dev site, we enabled google captcha v3 yesterday on our production site.
All seemed well. Everyone could login, no more streetlight and motorcycle matching. It "just worked".
Today we have a report from a user getting this message to login:
--
Your submission was not accepted. Please try again, as we could not verify your actions at this time.
--
When I tried to login to our production site, I got the same error.
To see if google was having issues, I tried to login to our dev site. That worked.
Then I tried production again, and suddenly it works. Note I use a password manager; there's no mistyping the password.
I checked the AC error log, and there are numerous exceptions pertaining to recaptcha, but not at login:
--
from Checkout/Default/58
Exception: Object reference not set to an instance of an object.
Stack Trace: at AbleCommerce.Code.GoogleReCaptchaV3Helper.Validate(String encodedResponse, String& errorMessages, String action)
at AbleCommerce.Code.CaptchaHelper.IsCaptchaValid(String captchaInput, String challengeText, HttpRequestBase request, String& reCaptchaErrorMessage, String action)
at AbleCommerce.Controllers.CheckoutController.Default(AccountLoginModel model)
at lambda_method(Closure , ControllerBase , Object[] )
at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethod(ControllerContext controllerContext, ActionDescriptor actionDescriptor, IDictionary`2 parameters)
at System.Web.Mvc.ControllerActionInvoker.<>c__DisplayClass24_0.<InvokeActionMethodWithFilters>b__0()
at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethodFilter(IActionFilter filter, ActionExecutingContext preContext, Func`1 continuation)
at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethodFilter(IActionFilter filter, ActionExecutingContext preContext, Func`1 continuation)
at System.Web.Mvc.ControllerActionInvoker.InvokeAction(ControllerContext controllerContext, String actionName)
at System.Web.Mvc.Controller.ExecuteCore()
at System.Web.Mvc.ControllerBase.Execute(RequestContext requestContext)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c.<.cctor>b__15_0(IAsyncResult asyncResult, Action action)
at System.Web.Mvc.Controller.EndExecute(IAsyncResult asyncResult)
at System.Web.Mvc.MvcHandler.<>c.<BeginProcessRequest>b__20_1(IAsyncResult asyncResult, ProcessRequestState innerState)
at System.Web.Mvc.Async.AsyncResultWrapper.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult)
at System.Web.Mvc.MvcHandler.EndProcessRequest(IAsyncResult asyncResult)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
--
Our google console isn't showing any unsuccessful/suspicious logins. However it also seems to be lagging and only showing yesterday's activity.
Can you please opine on:
1 - What does the first login failure message mean?
2 - Is there any indication anywhere in AC when a user fails a recaptcha v3 login? ie, userid and score?
3 - What's the above exception about? Note we disabled the captcha check on checkout, per the instructions that came with this version, as it's painful for our users.
4 - I think recaptcha v3 was released two versions ago. Are there reports of problems from other users?
Thanks,
Charles
