fix: allow to bypass recaptcha via env var (#2133)

Author: spaenleh

src/services/auth/plugins/captcha/captcha.ts

@@ -8,7 +8,7 @@ import type { RouteShorthandHook } from 'fastify/types/route';
 import type { RecaptchaActionType } from '@graasp/sdk';
 
 import { DEV } from '../../../../config/env';
-import { RECAPTCHA_SECRET_ACCESS_KEY } from '../../../../utils/config';
+import { BYPASS_RECAPTCHA, RECAPTCHA_SECRET_ACCESS_KEY } from '../../../../utils/config';
 import { AuthenticationError } from './errors';
 
 export const RECAPTCHA_VERIFY_LINK = 'https://www.google.com/recaptcha/api/siteverify';
@@ -43,7 +43,7 @@ async function validateCaptcha(
 ) {
   const shouldFailIfLowScore = options?.shouldFail ?? true;
   // TODO: find a better solution? to allow dev
-  if (DEV) {
+  if (DEV || BYPASS_RECAPTCHA === true) {
     return;
   }
 

src/utils/config.ts

@@ -2,7 +2,7 @@ import os from 'os';
 
 import { ClientManager, Context, DEFAULT_LANG, GPTVersion, type GPTVersionType } from '@graasp/sdk';
 
-import { requiredEnvVar } from '../config/helpers';
+import { requiredEnvVar, toBoolean } from '../config/helpers';
 import type {
   LocalFileConfiguration,
   S3FileConfiguration,
@@ -196,6 +196,9 @@ export const EMBEDDED_LINK_ITEM_IFRAMELY_HREF_ORIGIN = requiredEnvVar(
 export const IMAGE_CLASSIFIER_API =
   process.env.IMAGE_CLASSIFIER_API ?? 'http://localhost:8080/infer';
 
+// allows to bypass captcha validation (for example when running in production)
+export const BYPASS_RECAPTCHA = toBoolean(process.env.BYPASS_RECAPTCHA, { default: false });
+
 export const ITEMS_ROUTE_PREFIX = '/api/items';
 export const APP_ITEMS_PREFIX = '/api/app-items';
 export const THUMBNAILS_ROUTE_PREFIX = '/thumbnails';