Implement optional uploading to mCaptcha/survey from mCaptcha/mCaptcha instances #3

New Issue

Closed

opened 2023-02-13 15:13:43 +05:30 by realaravinth · 4 comments

realaravinth commented

2023-02-13 15:13:43 +05:30

Owner

Plan

Implement dynamic survey creation and results upload on mcaptcha/survey
Cronjob to periodically upload to mCaptcha/survey

Notes

Upload can be two-step process. A webhook notification to mCaptcha/survey to pull from mCaptcha/mCaptcha could prevent spoofing.

## Plan 1. [ ] Implement dynamic survey creation and results upload on mcaptcha/survey 2. [ ] Cronjob to periodically upload to mCaptcha/survey ## Notes Upload can be two-step process. A webhook notification to mCaptcha/survey to pull from mCaptcha/mCaptcha could prevent spoofing.

realaravinth added this to the 2023 project 2023-02-13 15:13:43 +05:30

realaravinth self-assigned this 2023-06-26 16:49:49 +05:30

realaravinth commented

2023-06-30 17:23:12 +05:30

Author

Owner

https://github.com/mCaptcha/mCaptcha/pull/92

realaravinth commented

2023-07-01 14:35:41 +05:30

Author

Owner

mcaptcha/mcaptcha <--> mcpatcha/survey integration

Authenticated webhook on mcapthca/survey. Init secret on survey and store the same on mCaptcha/mCaptcha: performance synchronization is can be expensive and so, it shouldn't be left unprotected. It should only be ordered by the mCaptcha/mCaptcha instance and must be configurable by the instance admin
mCaptcha/survey must pull data from mCaptcha/mCaptcha to protect against data pollution attacks

Instance registration

mCaptcha/mCaptcha requests registration on survey
survey creates token and posts secret to some API route on mCaptcha
If reset, redo 1 and 2.

## mcaptcha/mcaptcha <--> mcpatcha/survey integration 1. Authenticated webhook on mcapthca/survey. Init secret on survey and store the same on mCaptcha/mCaptcha: performance synchronization is can be expensive and so, it shouldn't be left unprotected. It should only be ordered by the mCaptcha/mCaptcha instance and must be configurable by the instance admin 2. mCaptcha/survey must pull data from mCaptcha/mCaptcha to protect against data pollution attacks ## Instance registration 1. mCaptcha/mCaptcha requests registration on survey 2. survey creates token and posts secret to some API route on mCaptcha 3. If reset, redo 1 and 2.

realaravinth commented

2023-07-02 00:22:39 +05:30

Author

Owner

mCaptcha/survey#17

https://git.batsense.net/mCaptcha/survey/pulls/17

realaravinth commented

2023-10-28 03:26:27 +05:30

Author

Owner

https://github.com/mCaptcha/mCaptcha/pull/92

realaravinth closed this issue