I recently tried to upgrade from recaptcha v2 to v3 as my FE needs to call multiple API from BE and it's difficult to implement it via v2. I want all my BE calls to be secured by recaptcha token. So, chose V3 to not interrupt users.
But I can see all the recaptcha tokens get verified without any issue event when I created 200 requests using chrome dev tools in incognito mode. I created 200 tokens using execute function and send the requests to the API. all of them verified successfully with score of 0.9.
So, my questions are:
- Is that because I use localhost for testing? the behaviour might be different in production?
- Is v3 supposed to detect those sort of requests? automated via a script in dev tools?
- Is v3 is less secure in compare to v2 as there is no human interaction needed?
- Is there any other way to use version 2 for multiple API calls? but with one user challenge?
Regards,
Ali