6.2.5 CE GA6, 6.2.10 EE GA1
There are 3 properties we can use to set the "recaptcha" url:
We can set this properties with urls starting by https, but if request is not secure, it will be changed to http.
Depending on each different liferay installation, it is possible that the application server is getting non secure requests (http), but the navigation is really using https for example because the web server configuration.
expected behavior: the protocol should not being modified
current behavior: the protocol could be modified
This issue is not affecting master because this component was updated in
LPS-55941 in order to support a new version of the recaptcha api and that change also solved this behavior.
Steps to configure reCAPTCHA
- Go to https://www.google.com/recaptcha and register a reCAPTCHA for localhost for your account
- Get the "site" and "secret" keys
- Start portal
- Go to the Login portlet and click on "Create Account"
Verify that after the fix reCAPTCHA is loaded and can be used successfully.