From ea3192d2016543aeb0ed0e5a5279138cee93d3ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=BF=81=E6=B2=BB=E5=B9=B3?= <gocreating@gmail.com>
Date: Mon, 24 Oct 2016 22:18:18 +0800
Subject: [PATCH 1/7] Install react-google-recaptcha

---
 package.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package.json b/package.json
index f83ba0a..ade8f7e 100644
--- a/package.json
+++ b/package.json
@@ -115,6 +115,7 @@
     "react-bootstrap": "^0.30.5",
     "react-dom": "^15.0.2",
     "react-ga": "^2.1.2",
+    "react-google-recaptcha": "^0.5.4",
     "react-helmet": "^3.0.2",
     "react-intl": "^2.1.2",
     "react-native": "^0.31.0",

From 757f63a8a8aed7433e582d6131dbf4dcbefc28d9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=BF=81=E6=B2=BB=E5=B9=B3?= <gocreating@gmail.com>
Date: Mon, 24 Oct 2016 22:58:47 +0800
Subject: [PATCH 2/7] Add configs

---
 configs/project/client.js                    |  1 +
 configs/project/recaptcha/client.js          | 11 +++++++++++
 configs/project/recaptcha/credential.tmpl.js | 11 +++++++++++
 configs/project/server.js                    |  1 +
 4 files changed, 24 insertions(+)
 create mode 100644 configs/project/recaptcha/client.js
 create mode 100644 configs/project/recaptcha/credential.tmpl.js

diff --git a/configs/project/client.js b/configs/project/client.js
index c6e585a..4efd779 100755
--- a/configs/project/client.js
+++ b/configs/project/client.js
@@ -8,4 +8,5 @@ module.exports = {
       trackingID: 'UA-86112397-1',
     },
   },
+  recaptcha: require('./recaptcha/client'),
 };
diff --git a/configs/project/recaptcha/client.js b/configs/project/recaptcha/client.js
new file mode 100644
index 0000000..24f1d28
--- /dev/null
+++ b/configs/project/recaptcha/client.js
@@ -0,0 +1,11 @@
+module.exports = {
+  development: {
+    siteKey: '6LfQGgoUAAAAAANHp6AvQOYD81JU9GnThpiIK7pH',
+  },
+  test: {
+    siteKey: '6LfQGgoUAAAAAANHp6AvQOYD81JU9GnThpiIK7pH',
+  },
+  production: {
+    siteKey: '6LeoHAoUAAAAAHKlo43OuPREJb22GLmik2HSaFC1',
+  },
+};
diff --git a/configs/project/recaptcha/credential.tmpl.js b/configs/project/recaptcha/credential.tmpl.js
new file mode 100644
index 0000000..11d5f79
--- /dev/null
+++ b/configs/project/recaptcha/credential.tmpl.js
@@ -0,0 +1,11 @@
+module.exports = {
+  development: {
+    secretKey: 'akb48akb48akb48akb48akb48akb48akb48akb48',
+  },
+  test: {
+    secretKey: 'akb48akb48akb48akb48akb48akb48akb48akb48',
+  },
+  production: {
+    secretKey: 'akc49akc49akc49akc49akc49akc49akc49akc49',
+  },
+};
diff --git a/configs/project/server.js b/configs/project/server.js
index 00b5313..deb8eb6 100755
--- a/configs/project/server.js
+++ b/configs/project/server.js
@@ -18,5 +18,6 @@ if (process.env.TRAVIS) {
       facebook: require('./passportStrategy/facebook/credential'),
       linkedin: require('./passportStrategy/linkedin/credential'),
     },
+    recaptcha: require('./recaptcha/credential'),
   };
 }

From 563116ba8dabb88fe58f9ff95ce9901480528db6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=BF=81=E6=B2=BB=E5=B9=B3?= <gocreating@gmail.com>
Date: Tue, 25 Oct 2016 00:39:16 +0800
Subject: [PATCH 3/7] Add recaptcha type for FormField

---
 src/common/components/utils/BsForm.js | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/src/common/components/utils/BsForm.js b/src/common/components/utils/BsForm.js
index 049654d..974698f 100644
--- a/src/common/components/utils/BsForm.js
+++ b/src/common/components/utils/BsForm.js
@@ -4,6 +4,8 @@ import BsFormGroup from 'react-bootstrap/lib/FormGroup';
 import Col from 'react-bootstrap/lib/Col';
 import ControlLabel from 'react-bootstrap/lib/ControlLabel';
 import HelpBlock from 'react-bootstrap/lib/HelpBlock';
+import Recaptcha from 'react-google-recaptcha';
+import configs from '../../../../configs/project/client';
 
 class BsForm extends Component {
   getChildContext() {
@@ -65,7 +67,20 @@ let BsFormField = ({
   let isShowError = meta && meta.touched && meta.error;
 
   let formControl = null;
-  if (options) {
+  if (type === 'recaptcha') {
+    // ref:
+    //   - <https://github.com/erikras/redux-form/issues/1880>
+    /* eslint-disable */
+    formControl = configs.recaptcha ? (
+      <Recaptcha
+        sitekey={configs.recaptcha[process.env.NODE_ENV].siteKey}
+        onChange={input.onChange}
+      />
+    ) : (
+      <pre>Recaptcha is disabled</pre>
+    );
+    /* eslint-enable */
+  } else if (options) {
     // ref: <https://github.com/erikras/redux-form/issues/1857#issuecomment-249890206>
     formControl = (
       options.map((option) => (

From 20edeca8262af58335972e6aec0ab2e267b5d6f1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=BF=81=E6=B2=BB=E5=B9=B3?= <gocreating@gmail.com>
Date: Tue, 25 Oct 2016 00:39:44 +0800
Subject: [PATCH 4/7] Add recaptcha for RegisterForm

---
 src/common/components/forms/RegisterForm.js | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/common/components/forms/RegisterForm.js b/src/common/components/forms/RegisterForm.js
index cb9d87f..1f2a4b4 100644
--- a/src/common/components/forms/RegisterForm.js
+++ b/src/common/components/forms/RegisterForm.js
@@ -8,6 +8,7 @@ import userAPI from '../../api/user';
 import { validateForm } from '../../actions/formActions';
 import { pushErrors } from '../../actions/errorActions';
 import { Form, FormField, FormFooter } from '../utils/BsForm';
+import configs from '../../../../configs/project/client';
 
 const validate = (values) => {
   const errors = {};
@@ -24,6 +25,10 @@ const validate = (values) => {
     errors.password = 'Required';
   }
 
+  if (configs.recaptcha && !values.recaptcha) {
+    errors.recaptcha = 'Required';
+  }
+
   return errors;
 };
 
@@ -90,6 +95,12 @@ class RegisterForm extends Component {
           type="password"
           placeholder="Password"
         />
+        <Field
+          label=" "
+          name="recaptcha"
+          component={FormField}
+          type="recaptcha"
+        />
         <FormFooter>
           <Button
             type="submit"

From 85083991fa70f1e34c7015e95853ac269f1476ca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=BF=81=E6=B2=BB=E5=B9=B3?= <gocreating@gmail.com>
Date: Tue, 25 Oct 2016 00:40:28 +0800
Subject: [PATCH 5/7] Add error type INVALID_RECAPTCHA

---
 src/common/constants/ErrorCodes.js | 1 +
 src/common/constants/Errors.js     | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/src/common/constants/ErrorCodes.js b/src/common/constants/ErrorCodes.js
index e4bf60d..45b305c 100644
--- a/src/common/constants/ErrorCodes.js
+++ b/src/common/constants/ErrorCodes.js
@@ -8,5 +8,6 @@ export default {
   LOCALE_NOT_SUPPORTED: 'LOCALE_NOT_SUPPORTED',
   USER_TOKEN_EXPIRATION: 'USER_TOKEN_EXPIRATION',
   ODM_VALIDATION: 'ODM_VALIDATION',
+  INVALID_RECAPTCHA: 'INVALID_RECAPTCHA',
   SOCIAL_AUTH_FAIL: 'SOCIAL_AUTH_FAIL',
 };
diff --git a/src/common/constants/Errors.js b/src/common/constants/Errors.js
index daffeab..04c4e64 100644
--- a/src/common/constants/Errors.js
+++ b/src/common/constants/Errors.js
@@ -19,6 +19,12 @@ export default {
     title: 'Database Validation Failed',
     detail: 'The data is invalid.',
   },
+  [ErrorCodes.INVALID_RECAPTCHA]: {
+    code: ErrorCodes.INVALID_RECAPTCHA,
+    status: 400,
+    title: 'Invalid Recaptcha',
+    detail: 'The value of recaptcha is invalid.',
+  },
   [ErrorCodes.STATE_PRE_FETCHING_FAIL]: {
     code: ErrorCodes.STATE_PRE_FETCHING_FAIL,
     status: 500,

From 5d75baeb36df3122f3439bdf7ff135606fddb767 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=BF=81=E6=B2=BB=E5=B9=B3?= <gocreating@gmail.com>
Date: Tue, 25 Oct 2016 00:41:11 +0800
Subject: [PATCH 6/7] Add middleware verifyRecaptcha

---
 src/server/middlewares/verifyRecaptcha.js | 32 +++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 src/server/middlewares/verifyRecaptcha.js

diff --git a/src/server/middlewares/verifyRecaptcha.js b/src/server/middlewares/verifyRecaptcha.js
new file mode 100644
index 0000000..86b1345
--- /dev/null
+++ b/src/server/middlewares/verifyRecaptcha.js
@@ -0,0 +1,32 @@
+import superagent from 'superagent';
+import Errors from '../../common/constants/Errors';
+import serverConfigs from '../../../configs/project/server';
+import clientConfigs from '../../../configs/project/client';
+
+export default (req, res, next) => {
+  if (process.env.NODE_ENV === 'test' || !clientConfigs.recaptcha) {
+    return next();
+  }
+  superagent
+    .post('https://www.google.com/recaptcha/api/siteverify')
+    .type('form')
+    .send({
+      secret: serverConfigs.recaptcha[process.env.NODE_ENV].secretKey,
+      response: req.body.recaptcha,
+    })
+    .end((err, { body } = {}) => {
+      if (err) {
+        res.pushError(Errors.UNKNOWN_EXCEPTION, {
+          meta: err,
+        });
+        return res.errors();
+      }
+      if (!body.success) {
+        res.pushError(Errors.INVALID_RECAPTCHA, {
+          meta: body['error-codes'],
+        });
+        return res.errors();
+      }
+      next();
+    });
+};

From 90ceb05b6bf9d0fde5e9386bf86a2feb3a39af06 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=BF=81=E6=B2=BB=E5=B9=B3?= <gocreating@gmail.com>
Date: Tue, 25 Oct 2016 00:42:12 +0800
Subject: [PATCH 7/7] Apply recaptcha verification for API User#Create

---
 src/server/routes/api.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/server/routes/api.js b/src/server/routes/api.js
index c7d1255..8fc71fe 100644
--- a/src/server/routes/api.js
+++ b/src/server/routes/api.js
@@ -1,6 +1,7 @@
 import configs from '../../../configs/project/server';
 import Roles from '../../common/constants/Roles';
 import bodyParser from '../middlewares/bodyParser';
+import verifyRecaptcha from '../middlewares/verifyRecaptcha';
 import authRequired from '../middlewares/authRequired';
 import roleRequired from '../middlewares/roleRequired';
 import fileUpload from '../middlewares/fileUpload';
@@ -16,7 +17,11 @@ export default ({ app }) => {
     roleRequired([Roles.ADMIN]),
     userController.list
   );
-  app.post('/api/users', bodyParser.json, userController.create);
+  app.post('/api/users',
+    bodyParser.json,
+    verifyRecaptcha,
+    userController.create
+  );
   app.post('/api/users/login', bodyParser.json, userController.login);
   app.get('/api/users/logout', userController.logout);
   app.get('/api/users/me', authRequired, userController.show);