Vladislav Rajtmajer

Senior PHP / Laravel Engineer

Plzeň, Czech Republic · remote · contract (IČO)

available now for new contracts

ships across 3 ecosystems: Composer · WordPress.org · npm

final class ValidCaptcha implements ValidationRule
{
    public function validate(string $attribute, mixed $value, Closure $fail): void
    {
        // Fortify runs the validator twice in one request. The response is
        // single-use server-side, so the second verify would reject a visitor
        // who already passed. Memoize a success per request, short-circuit it.
        if ($this->isMemoized($memoKey)) {
            return;
        }

        try {
            $response = Http::asJson()->withToken($secret)
                ->timeout(Captchaapi::verifyTimeout())
                ->post(Captchaapi::verifyUrl(), ['response' => $value]);
        } catch (ConnectionException) {
            $this->whenUnavailable($fail);   // outage -> fail policy, no retry
            return;
        }

        if ($response->serverError()) {      // a 5xx is our fault, not the user's
            $this->whenUnavailable($fail);
            return;
        }

        $response->json('success') === true
            ? $this->memoize($memoKey)
            : $fail($this->rejectionMessage());
    }
}

Excerpt from captchaapi/laravel, my open-source Laravel SDK (Composer · MIT). The small, unglamorous edge cases - handled, and documented for whoever reads it next.

English: working proficiency, years of English-only daily standups. Czech: native.