The CAPTCHA Validation Lifecycle

The backend Authorize function works with the Wix reCAPTCHA element on a Wix site. Backend authorization is a mandatory step of the CAPTCHA validation lifecycle.

The following steps outline a typical validation lifecycle:

1. A button or another clickable element that triggers a submit, login, or another restricted operation is disabled, pending CAPTCHA verification.

2. A site visitor completes the CAPTCHA challenge. One of the following occurs:

   • Verification: The CAPTCHA is verified and generates a token. The onVerified() event indicates a successful CAPTCHA challenge completion, and enables the disabled clickable element.
   • Error: The reCAPTCHA element loses connection with the CAPTCHA provider. You can use the onError() event handler to instruct the visitor to try again later. Return to Step 1.

3. The clickable element is enabled. One of the following occurs:

   • Click: The site visitor clicks the clickable element, triggering a backend function that calls Authorize with the generated token.
   • Timeout: The site visitor did not click the submit button within 120 seconds of token generation, causing the token to expire. When timeout occurs, the reCAPTCHA element automatically resets and displays a message asking the site visitor to redo the challenge. Use the onTimeout() event handler to disable the clickable trigger. Return to Step 1.

4. Authorize checks whether the token is valid. One of the following occurs:

   • Authorization: The CAPTCHA is authorized. Perform the restricted operation and reset the reCAPTCHA element for future operations.
   • Error: Token fails authorization. Reset the reCAPTCHA element and ask the visitor to redo the challenge. Return to Step 1.