Weave Code
Login Recaptcha Bundle Laravel Package
syspay/login-recaptcha-bundle
Symfony bundle that adds Google reCAPTCHA protection to your login form, helping block automated brute-force and credential-stuffing attempts. Simple configuration integrates with Symfony Security and verifies reCAPTCHA during authentication.
Login Recaptcha Bundle
Frequently asked questions about Login Recaptcha Bundle
- Is syspay/login-recaptcha-bundle compatible with Laravel?
- No. syspay/login-recaptcha-bundle is a Symfony bundle built to integrate with Symfony Security, not a Laravel package. Laravel applications should use a Laravel-specific reCAPTCHA package or a custom validation rule instead of trying to install this bundle.
- How do I install syspay/login-recaptcha-bundle?
- Install it with Composer using composer require syspay/login-recaptcha-bundle, then register the bundle in your Symfony application according to your Symfony version. You will also need to configure Google reCAPTCHA site and secret keys and wire the verification into your login flow. Check the repository README for the exact bundle registration and configuration syntax.
- What does this bundle protect against on a login form?
- It adds Google reCAPTCHA protection to the login form to help block automated brute-force and credential-stuffing attempts. The bundle verifies the reCAPTCHA response during authentication through Symfony Security integration. It reduces bot-driven login abuse but should be combined with rate limiting, strong passwords, and monitoring.
- How does syspay/login-recaptcha-bundle integrate with Symfony Security?
- The bundle is described as integrating with Symfony Security and verifying reCAPTCHA during authentication. In practice, you configure it alongside your login form or authenticator so the reCAPTCHA check runs as part of the login process. The exact wiring depends on your Symfony Security version and authentication setup, so verify the configuration against the README.
- Which version of Google reCAPTCHA does this bundle support?
- The provided overview does not specify whether the bundle supports reCAPTCHA v2, v3, or Enterprise. Check the repository README and configuration files for supported keys, score thresholds, and verification behavior before adopting it. This matters because checkbox, score-based, and Enterprise flows require different client and server handling.
- Can I use this bundle with Laravel Breeze, Jetstream, or Fortify?
- No, this is a Symfony bundle and will not plug into Laravel's authentication stack. Laravel Breeze, Jetstream, and Fortify use Laravel guards and validation, so you need a Laravel-specific reCAPTCHA package or a custom rule that calls Google's verification endpoint. Trying to load a Symfony bundle in Laravel would require substantial custom integration and is not recommended.
- How should I test login reCAPTCHA in development?
- Look for Google reCAPTCHA test keys or a configuration option that disables enforcement in the test environment. In Symfony tests, you can usually mock the verification service or HTTP client so login tests do not depend on Google's API. Keep at least one integration test that exercises the real verification path before production.
- What production concerns come with using reCAPTCHA on login?
- Your login flow will depend on an outbound request to Google, so you need to handle timeouts, outages, and latency. Decide whether verification failures should fail open or fail closed, and protect your secret key like any other credential. reCAPTCHA is an additional layer, not a replacement for rate limiting, account lockout, and monitoring.
- What are the best alternatives for Laravel developers who need login reCAPTCHA?
- Use a Laravel-specific reCAPTCHA package that integrates with Laravel validation and HTTP client, or write a custom validation rule that calls Google's siteverify endpoint. Choose an option that supports the reCAPTCHA version you need and is actively maintained for your Laravel version. Avoid Symfony bundles for Laravel login forms unless you are prepared for custom integration work.
- Is syspay/login-recaptcha-bundle actively maintained?
- The provided context does not include release history, open issue counts, or supported Symfony versions. Check the GitHub repository for recent commits, tagged releases, and Composer version constraints before adopting it. Because this package touches authentication security, pin a version and review the code or look for a maintained alternative if activity is low.
Weaver
How can I help you explore Laravel packages today?