Hi Team,
I'm currently implementing reCAPTCHA Enterprise on a web page within my application and have encountered an issue where the validation seems to expire after just 1 minute, rather than the expected 2-minute validity period as stated in Google's documentation.
Here's how the flow works:
A user interacts with the reCAPTCHA checkbox on the page.
Once checked, my application calls an internal Web API.
This API then sends a Captcha Verification Request and successfully returns a valid score.
However, despite a successful verification, the validation expires right after 1 minute, and gives me a message "Validation failed, please try again" — even though no additional action or reset is performed on the token.
To troubleshoot:
I reviewed Google's documentation and found the expected validity is 2 minutes.
I removed all other JavaScript from the page to rule out script conflicts.
I verified that there are no manual resets of reCAPTCHA occurring in the code.
Unfortunately, these steps did not resolve the issue, and the token still expires prematurely. Any guidance or recommendations on resolving this behavior would be greatly appreciated.
Thank you for your support!