COMPARE TO master

Total Size Diff 📈 +12 Bytes

Maybe we can add a new configuration field, such as “reCAPTCHA endpoint” or “reCAPTCHA domain,” instead of replacing it globally.

Thank you for the PR. I think it is good! However, we might need to use www.recaptcha.net instead of just the root domain of recaptcha.net, to be more rigorous.

Thank you for the PR. I think it is good! However, we might need to use www.recaptcha.net instead of just the root domain of recaptcha.net, to be more rigorous.

Yes, you're right—I've updated the PR to use www.recaptcha.net instead.

Maybe we can add a new configuration field, such as “reCAPTCHA endpoint” or “reCAPTCHA domain,” instead of replacing it globally.

In that case, I recommend defaulting to www.recaptcha.net since many websites using Logto may not be aware that www.google.com is inaccessible in certain countries and regions—this could result in most Logto reCAPTCHAs failing to load for users in China.

Additionally, Google provides another endpoint: recaptcha.google.cn, which could also be added to the list as an alternative option.

@KarlLee830 we are working on this internally and will get back to you soon

@KarlLee830 Hi, after discussion, we’ve decided to add a new optional field called “reCAPTCHA domain”, allowing users to specify their own domain if needed. By default, this will be set to www.google.com, which aligns with Google’s official documentation. Would you be able to update this change?