From 261c3de09c4e7ba11580679eb99e5a7b3e9c5c8f Mon Sep 17 00:00:00 2001 From: wangsijie Date: Thu, 4 Dec 2025 16:22:46 +0800 Subject: [PATCH] feat: add new recaptcha fields docs --- docs/security/captcha/recaptcha-enterprise.md | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/docs/security/captcha/recaptcha-enterprise.md b/docs/security/captcha/recaptcha-enterprise.md index 9981ea26642..b42be7b2506 100644 --- a/docs/security/captcha/recaptcha-enterprise.md +++ b/docs/security/captcha/recaptcha-enterprise.md @@ -19,6 +19,7 @@ reCAPTCHA Enterprise is a Google service that protects websites from fraud and a - **Display name**: Any name you want to give to the key - **Application type**: Website - **Domain list**: Add Logto's endpoint domain + - **Verification type**: Choose between **Score-based (invisible)** or **Checkbox challenge**. This determines how reCAPTCHA will be displayed to users. See [Verification mode](#verification-mode) for more details. 4. After creating the key, you will be redirected to the key details page, copy the **ID**. ## Setup an API key {#setup-an-api-key} @@ -33,6 +34,28 @@ reCAPTCHA Enterprise is a Google service that protects websites from fraud and a 1. Copy the **Project ID** from the [home page of Google Cloud Console](https://console.cloud.google.com/welcome). +## Verification mode {#verification-mode} + +reCAPTCHA Enterprise supports two verification modes: + +- **Invisible**: Score-based verification that runs automatically in the background without user interaction. This is the default mode. +- **Checkbox**: Displays the classic "I'm not a robot" checkbox widget that requires user interaction. + +:::note +The verification mode you select in Logto must match the key type you created in Google Cloud Console. If you created a score-based key, select **Invisible**. If you created a checkbox challenge key, select **Checkbox**. +::: + +## Custom domain {#custom-domain} + +By default, Logto loads the reCAPTCHA script from `www.google.com`. However, in some regions where Google's standard domain is inaccessible, you can configure an alternative domain. + +Supported domains: + +- `www.google.com` (default) +- `recaptcha.net` + +To configure a custom domain, enter the domain in the **Domain** field when setting up reCAPTCHA Enterprise in Logto Console. + ## Enable CAPTCHA {#enable-captcha} Remember to enable CAPTCHA bot protection after you have set up the CAPTCHA provider.