Recaptch issue after migrating from v1.8.0-SNAPSHOT b0r0 to v2.0.8 bb7ed22b

[Cleiton Mafioletti]

When I tried to recover my password, I forgot my username and the reCaptcha box is not showing. When I enter the username and click next, the following error appears: PWM 5032 - Error validating CAPTCHA response. Close the browser and try again. If this error occurs again, contact technical support.

I have already checked the settings and also generated a new public and private key at google.com/recaptch, setting them in the settings, but the error still persists.

After forcing the error the log is as follows:

2025-07-08T18:55:55Z, ERROR, http.PwmResponse, {HKKUu} 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

2025-07-08T18:55:55Z, FATAL, servlet.AbstractPwmServlet, {HKKUu} unexpected error: 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

2025-07-08T18:54:13Z, ERROR, http.PwmResponse, {HKKUu} 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

2025-07-08T18:54:13Z, FATAL, servlet.AbstractPwmServlet, {HKKUu} unexpected error: 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

2025-07-08T18:44:47Z, ERROR, http.PwmResponse, {u2fJV} 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

2025-07-08T18:44:47Z, FATAL, servlet.AbstractPwmServlet, {u2fJV} unexpected error: 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

2025-07-08T18:08:59Z, ERROR, http.PwmResponse, {CoQQW} 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

2025-07-08T18:08:59Z, FATAL, servlet.AbstractPwmServlet, {CoQQW} unexpected error: 5032 ERROR_CAPTCHA_API_ERROR (missing recaptcha validation response) [172.19.3.7]

Grateful.

[Jason Rivard]

I'm not seeing re-captcha issues on my own 2.0.8 install. 

The error suggests the client (browser) isn't sending the user's validatation code to the PWM server.  Things to try:

- Remove any customizations  (JSP/JS/CSS) etc. you have made to the default files included in the download.

- Remove embedded JS code

- If your using a WAR depoloyment, clear the tomcat/temp and tomcat/work directories while tomcat is stopped.

- Try a different browser in private mode with no extensions.

- Access the PWM server directly without going through a firewall or proxy server.

Hope this helps!

[Cleiton Mafioletti]

He resolved it as follows:

I replaced the `recaptcha.net` domains with `google.com` in the PWM 2.0.8 source code, thus recompiling using Maven and deploying it to Tomcat 9.

Because PWM in its source code brings recaptcha.net as default, but in Brazil this link no longer works.

AppProperty.properties
----------------------
Path: server/src/main/resources/password/pwm/AppProperty.properties
replace with:
recaptcha.clientJsUrl=//www.recaptcha.net/recaptcha/api.js
recaptcha.clientIframeUrl=//www.recaptcha.net/recaptcha/api/noscript
recaptcha.validateUrl=https://www.recaptcha.net/recaptcha/api/siteverify
Por:
recaptcha.clientJsUrl=//www.google.com/recaptcha/api.js
recaptcha.clientIframeUrl=//www.google.com/recaptcha/api/noscript
recaptcha.validateUrl=https://www.google.com/recaptcha/api/siteverify

PwmSetting.xml
--------------
Path: server/src/main/resources/password/pwm/config/PwmSetting.xml
Buscar por:
https://www.recaptcha.net/recaptcha/
replace with:
https://www.google.com/recaptcha/

CaptchaUtility.java
-------------------
Path: server/src/main/java/password/pwm/util/CaptchaUtility.java
Replace optional documentation link:
http://recaptcha.net/apidocs/captcha/ -> https://developers.google.com/recaptcha/docs/display

I don't know if this was the only option, but it worked for me.

Thanks for the tips.

[Jason Rivard]

Glad you got it working!

AppProperty values can be modified without rebuilding.  You can set override values in ' Settings ⇨ Application ⇨ App Property Overrides'

[Cleiton Mafioletti]

That's great to hear, thanks.