feat: create reCAPTCHA validation utility

CHANGELOG.rst

@@ -4,7 +4,8 @@ CHANGELOG
 7.0.7 (unreleased)
 ------------------
 
-- Nothing changed yet.
+- feat: create reCAPTCHA validation utility 
+[rboixaderg]
 
 
 7.0.6 (2025-10-10)

guillotina/_settings.py

@@ -32,6 +32,11 @@
             "factory": "guillotina.async_util.AsyncJobPool",
             "settings": {"max_size": 5},
         },
+        "guillotina.recaptcha": {
+            "provides": "guillotina.interfaces.IRecaptchaValidationUtility",
+            "factory": "guillotina.auth.recaptcha.RecaptchaValidator",
+            "settings": {},
+        },
     },
     "store_json": True,
     "pickle_protocol": pickle.HIGHEST_PROTOCOL,

guillotina/api/login.py

@@ -5,7 +5,6 @@
 from guillotina import configure
 from guillotina.api.service import Service
 from guillotina.auth import authenticate_user
-from guillotina.auth.recaptcha import RecaptchaValidator
 from guillotina.auth.utils import find_user
 from guillotina.component import get_utility
 from guillotina.component import query_utility
@@ -21,6 +20,8 @@
 from guillotina.response import HTTPUnauthorized
 from guillotina.utils import get_authenticated_user
 from json.decoder import JSONDecodeError
+from guillotina.interfaces.async_util import IRecaptchaValidationUtility
+
 
 import json
 import jwt
@@ -240,10 +241,11 @@ async def __call__(self):
                 raise HTTPNotAcceptable()
         else:
             # We validate with recaptcha
-            validator = RecaptchaValidator()
-            status = await validator.validate()
-            if status is False:
-                raise HTTPUnauthorized(content={"text": "Invalid validation"})
+            recaptcha_validator = get_utility(IRecaptchaValidationUtility)
+            if recaptcha_validator is not None:
+                status = await recaptcha_validator.validate()
+                if status is False:
+                    raise HTTPUnauthorized(content={"text": "Invalid validation"})
 
             # We need to validate is a valid user
             user = await find_user({"id": user_id})
@@ -338,10 +340,11 @@ async def __call__(self):
         if allowed is False:
             raise HTTPUnauthorized(content={"text": "Not allowed registration"})
 
-        validator = RecaptchaValidator()
-        status = await validator.validate()
-        if status is False:
-            raise HTTPUnauthorized(content={"text": "Invalid validation"})
+        recaptcha_validator = get_utility(IRecaptchaValidationUtility)
+        if recaptcha_validator is not None:
+            status = await recaptcha_validator.validate()
+            if status is False:
+                raise HTTPUnauthorized(content={"text": "Invalid validation"})
 
         payload = await self.request.json()
 
@@ -398,10 +401,11 @@ async def __call__(self):
 )
 class InfoAccess(Service):
     async def __call__(self):
-        validator = RecaptchaValidator()
-        status = await validator.validate()
-        if status is False:
-            raise HTTPUnauthorized(content={"text": "Invalid validation"})
+        recaptcha_validator = get_utility(IRecaptchaValidationUtility)
+        if recaptcha_validator is not None:
+            status = await recaptcha_validator.validate()
+            if status is False:
+                raise HTTPUnauthorized(content={"text": "Invalid validation"})
 
         auth_providers = app_settings.get("auth_providers", {})
         providers = []

guillotina/auth/__init__.py

@@ -1,5 +1,4 @@
 from .groups import GroupsUtility  # noqa
-from .recaptcha import RecaptchaValidator  # noqa
 from .utils import authenticate_request  # noqa
 from .utils import authenticate_user  # noqa
 from .utils import find_user  # noqa

guillotina/interfaces/__init__.py

@@ -5,6 +5,7 @@
 from .async_util import ICacheUtility  # noqa
 from .async_util import IPubSubUtility  # noqa
 from .async_util import IQueueUtility  # noqa
+from .async_util import IRecaptchaValidationUtility  # noqa
 from .async_util import ISessionManagerUtility  # noqa
 from .behaviors import IAsyncBehavior  # noqa
 from .behaviors import IBehavior  # noqa

guillotina/interfaces/async_util.py

@@ -74,3 +74,8 @@ async def refresh_session(ident: str, session: str) -> str:
         """
         Refresh an actual session
         """
+
+
+class IRecaptchaValidationUtility(IAsyncUtility):
+    async def validate() -> bool:
+        pass