How is a CAPTCHA checked when a customer resets its password?

dmitry_fedyuk · March 4, 2016, 2:24am

magento/magento2/blob/cf7df72/app/code/Magento/Captcha/etc/events.xml#L15-L17


<event name="controller_action_predispatch_customer_account_forgotpasswordpost">
    <observer name="captcha" instance="Magento\Captcha\Observer\CheckForgotpasswordObserver"/>
</event>

github.com

magento/magento2/blob/cf7df72/app/code/Magento/Captcha/Observer/CheckForgotpasswordObserver.php#L58-L78


/**
 * Check Captcha On Forgot Password Page
 *
 * @param \Magento\Framework\Event\Observer $observer
 * @return $this
 */
public function execute(\Magento\Framework\Event\Observer $observer)
{
    $formId = 'user_forgotpassword';
    $captchaModel = $this->_helper->getCaptcha($formId);
    if ($captchaModel->isRequired()) {
        /** @var \Magento\Framework\App\Action\Action $controller */
        $controller = $observer->getControllerAction();
        if (!$captchaModel->isCorrect($this->captchaStringResolver->resolve($controller->getRequest(), $formId))) {
            $this->messageManager->addError(__('Incorrect CAPTCHA'));
            $this->_actionFlag->set('', \Magento\Framework\App\Action\Action::FLAG_NO_DISPATCH, true);
            $this->redirect->redirect($controller->getResponse(), '*/*/forgotpassword');
        }
    }


    return $this;

dmitry_fedyuk · March 4, 2016, 2:34am