event
CAPTCHA Validated Event
Logged when a reCAPTCHA token is successfully validated.
EventObservabilitySecurity
Overview
The CaptchaValidatedEventV1 is a log event emitted when the BFF Web service successfully validates a reCAPTCHA v3 token. This indicates the request passed bot detection and is allowed to proceed to the backend.
When is this event emitted?
This event is logged when:
- A request requires CAPTCHA validation (POST, PUT, PATCH, DELETE methods)
- The x-recaptcha-token header contains a valid token
- Google’s siteverify API returns a passing score above the threshold
Key Information
The event payload includes:
- Provider: The CAPTCHA provider used (recaptcha_v3)
- Score: The risk score returned by Google (0.0 to 1.0)
- Request Context: Environment, partner, request ID
CAPTCHA Score Interpretation
| Score Range | Interpretation |
|---|---|
| 0.9 - 1.0 | Very likely a good interaction |
| 0.7 - 0.9 | Likely a good interaction |
| 0.5 - 0.7 | Uncertain, may require additional verification |
| 0.0 - 0.5 | Likely bot or suspicious activity |
Use Cases
This event is used for:
- Monitoring CAPTCHA validation success rates
- Analyzing score distributions
- Tuning threshold configurations
- Security audit trails