Enforcing Captcha

[somesh.m...@gmail.com]

Hi,

I have a public web interface, which has a Captcha on it.

The Web interface has a button, which does not trigger any process specifically but fires a composite api, on the basis of the selection made by the user (we use jQuery to fire the api).

Now, the issue that I see is that in this specific implementation the captcha never gets enforced (because the button is not triggering a process?)

I can share the location of the public web interface if that helps.

Thanks!

[Dimitri MELCHIOR Pro]

Hi Somesh,

Indeed, there is not enforcing on entering data in captcha when triggering a public Composite API. The developper who configures that must take the responsibility and ensure that any robot will not consume that. This is really important as in Public web interfaces, the pricing is per-use.

Nevertheless, you can implement yourself a batch every 10 minutes that checks how many times that Composite API has been launched. If it is considered as too many, it could cut off the service.

On our side, we cannot engage on whether we will find any problem with your composite API.

Best regards.

--

Dimitri MELCHIOR

PreSales Consultant

Contact: dmel...@runmyprocess.com

Tel: +33(0)1 75 77 51 78

Mobile : +33(0)6 52 70 89 82

Website: Fujitsu RunMyProcess

     

Fujitsu RunMyProcess user? Please add a review on GoogleApps Marketplace

Afin de contribuer au respect de l'environnement, merci de n'imprimer ce message qu'en cas de nécessité.
Be environmentally friendly: do not print this email unless it is entirely necessary.

--
Fujitsu - RunMyProcess
---
You received this message because you are subscribed to the Google Groups "RunMyProcess Support Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to supportforum...@runmyprocess.com.
To post to this group, send email to suppor...@runmyprocess.com.
Visit this group at http://groups.google.com/a/runmyprocess.com/group/supportforum/.
To view this discussion on the web visit https://groups.google.com/a/runmyprocess.com/d/msgid/supportforum/5b26b6f0-8f6f-476f-a617-e79d92281536%40runmyprocess.com.
For more options, visit https://groups.google.com/a/runmyprocess.com/groups/opt_out.

[somesh.m...@gmail.com]

Thanks Dimitri. You mentioned that we can have a throttle mechanism by creating a batch? Are you suggesting that whenever the api is triggered, we capture the request in a collection (along with the user source details?) and check the request count prior to allowing a new user request?

I have seen that the Connectors have a permissible number of requests setting, but they would not work for the composite apis, it appears.

Thanks!

[Dimitri MELCHIOR Pro]

Hi somesh,

It's a good idea even though you are not compelled to create a collection as Composite APIs are natively injected into a Mongo DB databasis accessible via a GET :

Method : GET

URL : logs/request/${P_customer}/?P_nb=${P_nb}&P_first=${P_first}&P_from=${P_from}&P_to=${P_to}&P_mode=${P_mode}&P_processId=${P_processId}

Accept: application/json

Content-type : application/json

where :

P_from = A timestamp to be used a lower limit while retrieving the requets (created date). 

P_to = A timestamp to be used an upper limit while retrieving the requets (created date).

P_processId = The process id of the process request (works with Composite API)

--

Dimitri MELCHIOR

PreSales Consultant

Contact: dmel...@runmyprocess.com

Tel: +33(0)1 75 77 51 78

Mobile : +33(0)6 52 70 89 82

Website: Fujitsu RunMyProcess

     

Fujitsu RunMyProcess user? Please add a review on GoogleApps Marketplace

Afin de contribuer au respect de l'environnement, merci de n'imprimer ce message qu'en cas de nécessité.
Be environmentally friendly: do not print this email unless it is entirely necessary.

Thanks!

--
Fujitsu - RunMyProcess
---
You received this message because you are subscribed to the Google Groups "RunMyProcess Support Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to supportforum...@runmyprocess.com.
To post to this group, send email to suppor...@runmyprocess.com.
Visit this group at http://groups.google.com/a/runmyprocess.com/group/supportforum/.

To view this discussion on the web visit https://groups.google.com/a/runmyprocess.com/d/msgid/supportforum/0ff2b93e-9084-4baf-8f2c-cb19bca28cd8%40runmyprocess.com.

[somesh.m...@gmail.com]

Interesting - Thanks for sharing this Dimitri!