Use with authlogic-oid about recaptcha

[ambethia]

The easiest way is probably to check verify_recaptcha before beginning the @user.save block. It's really just a matter of handling your app's logic in a way that's most appropriate for you.

[rurounijones]

The problem with this is that upon registration and passing the captcha test you are redirected to the openid page. Once you pass that you are directed back to the create action and the captcha code kicks in again and fails.

1. Submit form to the user create action
2. Pass verify_captcha
3. Get redirected to the external openid authorisation page
4. Authorise the site and get redirected back to the user create action
5. Fail the captcha test

A way is needed of calling verify_captcha only upon the initial form submission and not when being redirected back to from the external openid auth page. This needs to be done in a way that cannot be exploited to skip the captcha

This is the problem I cannot figure out. The code above is basically the example authlogic-oid code, nothing specific to my app so figuring this out should help everyone else who wants to combine this.

[ambethia]

you could save the results in session, say, session[:captcha_verified] ||= verify_recaptcha, then check that before doing the authlogic-oid stuff.

[rurounijones]

Obviously simple answer that I naturally missed. That worked perfectly. Thank you