Use Altcha challenge on admin login page

Signed-off-by: Keshav Priyadarshi <git@keshav.space>

Author: keshav-space

setup.cfg

@@ -65,6 +65,7 @@ install_requires =
     crispy-bootstrap4>=2024.1
     django-environ>=0.11.0
     gunicorn>=23.0.0
+    django-altcha==0.2.0
 
     # for the API doc
     drf-spectacular[sidecar]>=0.24.2

vulnerabilities/forms.py

@@ -10,6 +10,7 @@
 from django import forms
 from django.contrib.admin.forms import AdminAuthenticationForm
 from django.core.validators import validate_email
+from django_altcha import AltchaField
 from django_recaptcha.fields import ReCaptchaField
 from django_recaptcha.widgets import ReCaptchaV2Checkbox
 
@@ -102,9 +103,6 @@ class PipelineSchedulePackageForm(forms.Form):
 
 
 class AdminLoginForm(AdminAuthenticationForm):
-    captcha = ReCaptchaField(
-        error_messages={
-            "required": ("Captcha is required"),
-        },
-        widget=ReCaptchaV2Checkbox(),
+    captcha = AltchaField(
+        floating=True,
     )

vulnerablecode/settings.py

@@ -85,6 +85,7 @@
     "drf_spectacular_sidecar",
     "django_recaptcha",
     "django_rq",
+    "django_altcha",
 )
 
 if env.str("RECAPTCHA_PUBLIC_KEY", None):

vulnerablecode/urls.py

@@ -137,10 +137,10 @@ def __init__(self, *args, **kwargs):
         TemplateView.as_view(template_name="tos.html"),
         name="api_tos",
     ),
-    # path(
-    #     "admin/",
-    #     admin.site.urls,
-    # ),
+    path(
+        "admin/",
+        admin.site.urls,
+    ),
 ]
 
 if DEBUG: