Add recaptcha validation on password reset

FAForever · Mar 29, 2021 · 4779ffe · 4779ffe
1 parent 3f75003
commit 4779ffe
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main/java/com/faforever/api/user/UsersController.java b/src/main/java/com/faforever/api/user/UsersController.java
@@ -109,7 +109,9 @@ public void changeEmail(HttpServletRequest request,
 
   @ApiOperation("Sends a password reset request to the username OR email linked by this account.")
   @PostMapping(path = "/requestPasswordReset", produces = APPLICATION_JSON_VALUE)
-  public void requestPasswordReset(@RequestParam("identifier") String identifier) {
+  public void requestPasswordReset(@RequestParam("identifier") String identifier,
+                                   @RequestParam(value = "recaptchaResponse", required = false) String recaptchaResponse) {
+    recaptchaService.validateResponse(recaptchaResponse);
     userService.requestPasswordReset(identifier);
   }