Laravel 11 - How to Integrate Google reCAPTCHA v3

Quick Overview

Step # 1 : Create a New Laravel Project with Breeze Authentication.

laravel new reCAPTCHAV3

composer create-project laravel/laravel --prefer-dist reCAPTCHAV3

1. Would you like to install the starter kit? — Choose "Breeze"
2. After selecting Breeze, you'll be asked to choose your stack. — Choose Blade
3. After selecting Blade, you'll be asked for dark mode support. — Choose no
4. After selecting No, you'll be asked about testing framework.. — Choose Pest
5. After selecting Pest, you'll be asked to select the database for your application. — Choose mysql
6. After selecting MySql, you'll be asked if you want to run the default database migration. — Type yes
   
   

Step # 2 : Access the project.

cd c:xampp/htdocs/reCAPTCHAV3

Step # 3 : Install the reCAPTCHA V3 Package.

composer require josiasmontag/laravel-recaptchav3

Step # 4 : Publish the Config file (Optional).

php artisan vendor:publish --provider="Lunaweb\RecaptchaV3\Providers\RecaptchaV3ServiceProvider"

Step # 5 : Obtain reCAPTCHA V3 Site Key and Secret.

• Visit the reCAPTCHA Admin Console (Link : https://www.google.com/recaptcha/admin/create).
• Sign up or log in to your Google account if you haven't already.
• Create a label for your site (this will help you identify your keys later).
• Select reCAPTCHA v3 as the version.
• Define your site's domain(s) for security purposes.
• Click Submit to generate your Site Key and Secret Key.
  
  

RECAPTCHAV3_SITEKEY="Define your SITE KEY here"
RECAPTCHAV3_SECRET="Define your SITE SECRET here"

Step # 6 : Initialize reCAPTCHA V3 JavaScript.

{!! RecaptchaV3::initJs() !!}

Step # 7 : Add reCAPTCHA Field to the Registration Form.

{!! RecaptchaV3::field('register') !!}
<x-primary-button class="ms-4">
    {{ __('Register') }}
</x-primary-button>

Step # 8 : Validate reCAPTCHA v3.

'g-recaptcha-response' => 'required|recaptchav3:register,0.5',

Step # 9 : It's time to test.

php artisan serve

    public function store(Request $request): RedirectResponse
    {
        dd($request->all());
        $request->validate([
            'name' => ['required', 'string', 'max:255'],
            'email' => ['required', 'string', 'lowercase', 'email', 'max:255', 'unique:'.User::class],
            'password' => ['required', 'confirmed', Rules\Password::defaults()],
            'g-recaptcha-response' => 'required|recaptchav3:register,0.5',
        ]);
        $user = User::create([
            'name' => $request->name,
            'email' => $request->email,
            'password' => Hash::make($request->password),
        ]);
        event(new Registered($user));
        Auth::login($user);
        return redirect(route('dashboard', absolute: false));
    }

Step # 10 : Example of Validation Logic (Optional)

<?php
namespace App\Http\Controllers\Auth;
use App\Http\Controllers\Controller;
use App\Models\User;
use Illuminate\Auth\Events\Registered;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
use Illuminate\Validation\Rules;
use Illuminate\View\View;
//Facde
use Lunaweb\RecaptchaV3\Facades\RecaptchaV3;
class RegisteredUserController extends Controller
{
    /**
     * Display the registration view.
     */
    public function create(): View
    {
        return view('auth.register');
    }
    /**
     * Handle an incoming registration request.
     *
     * @throws \Illuminate\Validation\ValidationException
     */
    public function store(Request $request): RedirectResponse
    {
    // Verify the reCAPTCHA response and retrieve the score for the 'register' action
        $score = RecaptchaV3::verify($request->get('g-recaptcha-response'), 'register');
    // Check if the score is greater than 0.5 (indicating a likely legitimate user)
        if ($score > 0.5) {
    // Debug output: Score is acceptable, proceed with the desired action
            dd($score, "Do This");
        } else {
    // Debug output: Score is too low, handle as a potential bot or invalid response
            dd($score, 'Do That');
        }
        $request->validate([
            'name' => ['required', 'string', 'max:255'],
            'email' => ['required', 'string', 'lowercase', 'email', 'max:255', 'unique:'.User::class],
            'password' => ['required', 'confirmed', Rules\Password::defaults()],
            'g-recaptcha-response' => 'required|recaptchav3:register,0.5',
        ]);
        $user = User::create([
            'name' => $request->name,
            'email' => $request->email,
            'password' => Hash::make($request->password),
        ]);
        event(new Registered($user));
        Auth::login($user);
        return redirect(route('dashboard', absolute: false));
    }
}

Conclusion