Fix some typos, fix siteverify payload and error handling in flask app.

Dockerfile-proctected → Dockerfile-protected

@@ -16,7 +16,7 @@ RUN git clone https://github.com/mCaptcha/pow_py
 RUN cd pow_py && PATH=$PATH:/home/builder/.cargo/bin/ ../venv/bin/maturin build
 
 FROM python:3.10-slim-buster
-LABEL org.opencontainers.image.source https://github.com/mcaptcha/dos/unprotected
+LABEL org.opencontainers.image.source https://github.com/mcaptcha/dos/protected
 RUN set -ex; \
     apt-get update; \
     DEBIAN_FRONTEND=noninteractive \

Makefile

@@ -35,4 +35,4 @@ lint: ## Run linter
 #	$(call	test_pow_sha_256_py)
 
 serve:
-	@source ./venv/bin/activate && FLASK_APP=server/src/app FLASK_ENV=development flask run
+	. ./venv/bin/activate && FLASK_APP=server/src/app FLASK_ENV=development flask run

README.md

@@ -33,7 +33,7 @@ password hashing and storing in DB**
     [locust](https://locust.io) that launches an attack on the unprotected
     endpoint
 
--   [protected](./unprotected): DoS Client written using
-    [locust](https://locust.io) that launches an attack on the rotected
+-   [protected](./protected): DoS Client written using
+    [locust](https://locust.io) that launches an attack on the protected
     endpoint. It generates proof of work and solves the captcha on every
     request.

protected/locustfile.py

@@ -9,7 +9,7 @@
 username = "realaravinth"
 
 
-class Unprotected(FastHttpUser):
+class Protected(FastHttpUser):
     wait_time = between(5, 15)
     sitekey = os.getenv("MCAPTCHA_CAPTCHA_SITEKEY")
     host = os.getenv("MCAPTCHA_CAPTCHA_HOST")

server/src/app.py

@@ -58,8 +58,8 @@ def init_db():
 bcrypt = Bcrypt(app)
 init_db()
 
-# mcaptcha_sitekey = os.getenv("MCAPTCHA_SITEKEY")
-mcaptcha_sitekey = "oupjLmu2Fs34JwlNKB1LsRAI1lfLx4So"
+mcaptcha_secret = os.getenv("MCAPTCHA_SECRET")
+mcaptcha_sitekey = os.getenv("MCAPTCHA_SITEKEY")
 
 
 @app.route("/", methods=["POST", "GET"])
@@ -103,12 +103,15 @@ def protected():
         payload = {
             "token": mcaptcha_token,
             "key": mcaptcha_sitekey,
+            "secret": mcaptcha_secret,
         }
         resp = requests.post(
             "http://localhost:7000/api/v1/pow/siteverify", json=payload
         )
         resp = resp.json()
-        if resp["valid"] == False:
+        if resp["error"]:
+            return resp["error"], 500
+        elif resp["valid"] == False:
             return "invalid captcha", 400
         else:
             register(username, password)