48 lines
2 KiB
Markdown
48 lines
2 KiB
Markdown
---
|
|
stage: Ecosystem
|
|
group: Integrations
|
|
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
|
|
---
|
|
|
|
# reCAPTCHA **(FREE SELF)**
|
|
|
|
GitLab leverages [Google's reCAPTCHA](https://www.google.com/recaptcha/about/)
|
|
to protect against spam and abuse. GitLab displays the CAPTCHA form on the sign-up page
|
|
to confirm that a real user, not a bot, is attempting to create an account.
|
|
|
|
## Configuration
|
|
|
|
To use reCAPTCHA, first you must create a site and private key.
|
|
|
|
1. Go to the [Google reCAPTCHA page](https://www.google.com/recaptcha/admin).
|
|
1. Fill out the form necessary to obtain reCAPTCHA v2 keys.
|
|
1. Log in to your GitLab server, with administrator credentials.
|
|
1. Go to Reporting Applications Settings in the Admin Area (`admin/application_settings/reporting`).
|
|
1. Expand the **Spam and Anti-bot Protection** section.
|
|
1. Fill all reCAPTCHA fields with keys from previous steps.
|
|
1. Select the **Enable reCAPTCHA** checkbox.
|
|
1. To enable reCAPTCHA for logins via password, select the **Enable reCAPTCHA for login** checkbox.
|
|
1. Save the configuration.
|
|
1. Change the first line of the `#execute` method in `app/services/spam/spam_verdict_service.rb`
|
|
to `return CONDITIONAL_ALLOW` so that the spam check short-circuits and triggers the response to
|
|
return `recaptcha_html`.
|
|
|
|
NOTE:
|
|
Make sure you are viewing an issuable in a project that is public. If you're working with an issue, the issue is public.
|
|
|
|
## Enable reCAPTCHA for user logins using the HTTP header
|
|
|
|
You can enable reCAPTCHA for user logins via password [in the user interface](#configuration)
|
|
or by setting the `X-GitLab-Show-Login-Captcha` HTTP header.
|
|
For example, in NGINX, this can be done via the `proxy_set_header`
|
|
configuration variable:
|
|
|
|
```nginx
|
|
proxy_set_header X-GitLab-Show-Login-Captcha 1;
|
|
```
|
|
|
|
In Omnibus GitLab, this can be configured via `/etc/gitlab/gitlab.rb`:
|
|
|
|
```ruby
|
|
nginx['proxy_set_headers'] = { 'X-GitLab-Show-Login-Captcha' => '1' }
|
|
```
|