Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Broken captcha for registration and password reset in 5.9+ #13335

Closed
2 tasks done
kt315ua opened this issue Dec 18, 2024 · 5 comments · Fixed by #13338
Closed
2 tasks done

Broken captcha for registration and password reset in 5.9+ #13335

kt315ua opened this issue Dec 18, 2024 · 5 comments · Fixed by #13338
Assignees
Labels
bug Something is broken.
Milestone

Comments

@kt315ua
Copy link

kt315ua commented Dec 18, 2024

Describe the issue

On 5.7.2.2 registration and password reset working well. 5.8.4 also seems fine.
On 5.9.1 i can't register new account via superuser administration page, because new user can't pass registration by invitation link.
The same problem with password reset.

Our temporary solution: downgrade to 5.8.4
Server configuration described here: #13325
Possible relevant issue: #13322

I already tried

  • I've read and searched the documentation.
  • I've searched for similar filed issues in this repository.

Steps to reproduce the behavior

  1. register new account via superuser administration page
  2. try pass registration via received invitation link

Log error:

gunicorn stderr | [2024-12-18 15:58:43,040: ERROR/453] Invalid altcha solution: (None,)

Expected behavior

New user successfully registered

Screenshots

Знімок_20241218_152652
Знімок_20241218_152710
Знімок_20241218_152739
Знімок_20241218_152749
Знімок_20241218_152800
image

Exception traceback

No response

How do you run Weblate?

Docker container

Weblate versions

5.9.1 - issue exist
5.8.4, 5.7.2.2 - no issue

Weblate deploy checks

No response

Additional context

No response

@nijel
Copy link
Member

nijel commented Dec 18, 2024

Do you see any errors in the browser console?

@kt315ua
Copy link
Author

kt315ua commented Dec 18, 2024

@nijel
I don't see issues in the browser console (adblock, duck-duck-go are disabled)

@nijel
Copy link
Member

nijel commented Dec 18, 2024

Okay, there is a bug in our code that rejects any captcha after initial one fails. This one is fixed in #13338.

There also seems to be something wrong in altcha itself what makes solutions randomly not pass, I've reported that at altcha-org/altcha-lib-py#10.

@nijel nijel added the bug Something is broken. label Dec 18, 2024
@nijel nijel added this to the 5.9.2 milestone Dec 18, 2024
@nijel nijel self-assigned this Dec 19, 2024
@nijel nijel closed this as completed in 5ab2bf5 Dec 19, 2024
Copy link

Thank you for your report; the issue you have reported has just been fixed.

  • In case you see a problem with the fix, please comment on this issue.
  • In case you see a similar problem, please open a separate issue.
  • If you are happy with the outcome, don’t hesitate to support Weblate by making a donation.

1 similar comment
Copy link

Thank you for your report; the issue you have reported has just been fixed.

  • In case you see a problem with the fix, please comment on this issue.
  • In case you see a similar problem, please open a separate issue.
  • If you are happy with the outcome, don’t hesitate to support Weblate by making a donation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something is broken.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants