event

CAPTCHA Validated Event

Logged when a reCAPTCHA token is successfully validated.

EventObservabilitySecurity

Overview

The CaptchaValidatedEventV1 is a log event emitted when the BFF Web service successfully validates a reCAPTCHA v3 token. This indicates the request passed bot detection and is allowed to proceed to the backend.

When is this event emitted?

This event is logged when:

  • A request requires CAPTCHA validation (POST, PUT, PATCH, DELETE methods)
  • The x-recaptcha-token header contains a valid token
  • Google’s siteverify API returns a passing score above the threshold

Key Information

The event payload includes:

  • Provider: The CAPTCHA provider used (recaptcha_v3)
  • Score: The risk score returned by Google (0.0 to 1.0)
  • Request Context: Environment, partner, request ID

CAPTCHA Score Interpretation

Score Range Interpretation
0.9 - 1.0 Very likely a good interaction
0.7 - 0.9 Likely a good interaction
0.5 - 0.7 Uncertain, may require additional verification
0.0 - 0.5 Likely bot or suspicious activity

Use Cases

This event is used for:

  • Monitoring CAPTCHA validation success rates
  • Analyzing score distributions
  • Tuning threshold configurations
  • Security audit trails