Successful WAF CAPTCHA challenge is not updating aws_waf_token cookie

0

My application is rendering the CAPTCHA challenge from a WAF intercepted 405 response in an iframe. While successful completion of the puzzle renders the "That is correct, Success! You will be redirected shortly" text, the aws_waf_token cookie does not get updated in the chrome/firefox/safari/edge browser.

Looking more closely at the network traffic, when user submits the puzzle answer a successful POST call from the challenge.js to the "verify" endpoint completes but the subsequent POST request to the "voucher" endpoint fails with an 'InvalidRequest' 400 error. The request payload for the failed voucher call has two properties:

  1. a 'captcha_voucher' with the value taken from the verify response
  2. a 'existing_token' property with a value of null.

Given that the CAPTCHA challenge is essentially a black box, I'm at a loss on how to address this issue. Has anyone else run into this?

1 個回答
0

Hi, got any solution?

punith
已回答 9 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南