@opexa/portal-components 0.1.48 → 0.1.49

package/dist/client/hooks/useAuthenticateMutation.js

@@ -1,26 +1,27 @@
 import { useMutation } from '@tanstack/react-query';
-import { useReCaptcha } from 'next-recaptcha-v3';
-import { RECAPTCHA_HEADER_KEY } from '../../constants/index.js';
+import { GOOGLE_FRAUD_DEFENSE_HEADER_KEY, RECAPTCHA_HEADER_KEY, } from '../../constants/index.js';
 import { getQueryClient } from '../../utils/getQueryClient.js';
 import { getAuthenticateMutationKey } from '../../utils/mutationKeys.js';
 import { getSessionQueryKey } from '../../utils/queryKeys.js';
 import { authenticate } from '../services/authenticate.js';
 import { getSession } from '../services/getSession.js';
+import { useRecaptcha } from './useRecaptcha.js';
 export const useAuthenticateMutation = (config) => {
     const queryClient = getQueryClient();
-    const recaptcha = useReCaptcha();
+    const { executeRecaptcha, isGoogleFraudDefense } = useRecaptcha();
     return useMutation({
         ...config,
         mutationKey: getAuthenticateMutationKey(),
         mutationFn: async (input) => {
             const session = await getSession();
-            const token = recaptcha.reCaptchaKey
-                ? await recaptcha.executeRecaptcha('submit')
-                : null;
+            const token = await executeRecaptcha('submit');
+            const recaptchaHeaderKey = isGoogleFraudDefense
+                ? GOOGLE_FRAUD_DEFENSE_HEADER_KEY
+                : RECAPTCHA_HEADER_KEY;
             await authenticate(input, {
                 headers: {
                     ...(token && {
-                        [RECAPTCHA_HEADER_KEY]: token,
+                        [recaptchaHeaderKey]: token,
                     }),
                     ...(session.domain && {
                         Domain: session.domain,

package/dist/client/hooks/useRecaptcha.d.ts

@@ -0,0 +1,17 @@
+export interface UseRecaptchaReturn {
+    executeRecaptcha(action: string): Promise<string | null>;
+    isGoogleFraudDefense: boolean;
+}
+export declare function useRecaptcha(): UseRecaptchaReturn;
+declare global {
+    interface Window {
+        grecaptcha?: {
+            enterprise?: {
+                ready(callback: () => void): void;
+                execute(siteKey: string, options: {
+                    action: string;
+                }): Promise<string>;
+            };
+        };
+    }
+}

package/dist/client/hooks/useRecaptcha.js

@@ -0,0 +1,87 @@
+'use client';
+import { useReCaptcha } from 'next-recaptcha-v3';
+import { useCallback } from 'react';
+import { GOOGLE_FRAUD_DEFENSE_SITE_KEY_STORAGE } from '../../constants/index.js';
+import { useFeatureFlag } from './useFeatureFlag.js';
+export function useRecaptcha() {
+    const { enabled } = useFeatureFlag();
+    const recaptchaV3 = useReCaptcha();
+    const executeRecaptcha = useCallback(async (action) => {
+        if (enabled) {
+            const siteKey = sessionStorage.getItem(GOOGLE_FRAUD_DEFENSE_SITE_KEY_STORAGE);
+            if (!siteKey)
+                return null;
+            return executeGoogleFraudDefense(siteKey, action);
+        }
+        if (!recaptchaV3.reCaptchaKey)
+            return null;
+        return recaptchaV3.executeRecaptcha(action);
+    }, [enabled, recaptchaV3]);
+    return { executeRecaptcha, isGoogleFraudDefense: enabled };
+}
+let enterpriseLoaded = false;
+let enterpriseLoadPromise = null;
+function loadEnterpriseScript(siteKey) {
+    if (enterpriseLoaded)
+        return Promise.resolve();
+    if (!enterpriseLoadPromise) {
+        enterpriseLoadPromise = new Promise((resolve, reject) => {
+            const script = document.createElement('script');
+            script.src = `https://www.google.com/recaptcha/enterprise.js?render=${siteKey}`;
+            script.async = true;
+            script.defer = true;
+            script.onload = () => {
+                enterpriseLoaded = true;
+                resolve();
+            };
+            script.onerror = () => {
+                enterpriseLoadPromise = null;
+                reject(new Error('Failed to load reCAPTCHA Enterprise script'));
+            };
+            document.head.appendChild(script);
+        });
+    }
+    return enterpriseLoadPromise;
+}
+function waitForEnterprise() {
+    return new Promise((resolve) => {
+        if (window.grecaptcha?.enterprise) {
+            resolve();
+            return;
+        }
+        const interval = setInterval(() => {
+            if (window.grecaptcha?.enterprise) {
+                clearInterval(interval);
+                resolve();
+            }
+        }, 100);
+        setTimeout(() => {
+            clearInterval(interval);
+            resolve();
+        }, 10000);
+    });
+}
+async function executeGoogleFraudDefense(siteKey, action) {
+    try {
+        await loadEnterpriseScript(siteKey);
+        await waitForEnterprise();
+        return new Promise((resolve) => {
+            if (!window.grecaptcha?.enterprise) {
+                resolve(null);
+                return;
+            }
+            window.grecaptcha.enterprise.ready(async () => {
+                try {
+                    const token = await window.grecaptcha.enterprise.execute(siteKey, { action });
+                    resolve(token);
+                }
+                catch {
+                    resolve(null);
+                }
+            });
+        });
+    }
+    catch {
+        return null;
+    }
+}

package/dist/client/hooks/useSignInMutation.js

@@ -1,34 +1,35 @@
 import { Capacitor } from '@capacitor/core';
 import { useMutation } from '@tanstack/react-query';
 import { Thumbmark } from '@thumbmarkjs/thumbmarkjs';
-import { useReCaptcha } from 'next-recaptcha-v3';
-import { FINGERPRINT_HEADER_KEY, RECAPTCHA_HEADER_KEY } from '../../constants/index.js';
+import { FINGERPRINT_HEADER_KEY, GOOGLE_FRAUD_DEFENSE_HEADER_KEY, RECAPTCHA_HEADER_KEY, } from '../../constants/index.js';
 import { createPoll } from '../../utils/createPoll.js';
 import { getQueryClient } from '../../utils/getQueryClient.js';
 import { getSignInMutationKey } from '../../utils/mutationKeys.js';
 import { getSessionQueryKey } from '../../utils/queryKeys.js';
 import { getSession } from '../services/getSession.js';
 import { signIn } from '../services/signIn.js';
+import { useRecaptcha } from './useRecaptcha.js';
 export const useSignInMutation = (options) => {
     const queryClient = getQueryClient();
-    const recaptcha = useReCaptcha();
+    const { executeRecaptcha, isGoogleFraudDefense } = useRecaptcha();
     const { versionSession, ...config } = options ?? {};
     return useMutation({
         ...config,
         mutationKey: getSignInMutationKey(),
         mutationFn: async (input) => {
             const session = await getSession();
-            const token = recaptcha.reCaptchaKey
-                ? await recaptcha.executeRecaptcha('submit')
-                : null;
+            const token = await executeRecaptcha('submit');
             const isInplayEligible = input.type === 'NAME_AND_PASSWORD' || input.type === 'MOBILE_NUMBER';
             const fingerprint = versionSession === 'Inplay' && isInplayEligible
                 ? await getFingerprint()
                 : null;
+            const recaptchaHeaderKey = isGoogleFraudDefense
+                ? GOOGLE_FRAUD_DEFENSE_HEADER_KEY
+                : RECAPTCHA_HEADER_KEY;
             const signInOnce = () => signIn(input, {
                 headers: {
                     ...(token && {
-                        [RECAPTCHA_HEADER_KEY]: token,
+                        [recaptchaHeaderKey]: token,
                     }),
                     ...(session.domain && {
                         Domain: session.domain,

package/dist/client/hooks/useSignUpByNameMutation.js

@@ -1,20 +1,18 @@
 import { useMutation } from '@tanstack/react-query';
-import { useReCaptcha } from 'next-recaptcha-v3';
 import { registerMemberAccountByName, } from '../../services/account.js';
 import { getSignUpMutationKey } from '../../utils/mutationKeys.js';
 import { getSession } from '../services/getSession.js';
 import { useCellxpertCxd } from './useCellxpertCxd.js';
+import { useRecaptcha } from './useRecaptcha.js';
 export const useSignUpByNameMutation = (config) => {
-    const recaptcha = useReCaptcha();
+    const { executeRecaptcha } = useRecaptcha();
     const [cellxpertCxd] = useCellxpertCxd();
     return useMutation({
         ...config,
         mutationKey: getSignUpMutationKey(),
         mutationFn: async (input) => {
             const session = await getSession();
-            const reCAPTCHAResponse = recaptcha.reCaptchaKey
-                ? await recaptcha.executeRecaptcha('submit')
-                : '';
+            const reCAPTCHAResponse = (await executeRecaptcha('submit')) ?? '';
             return await registerMemberAccountByName({
                 ...input,
                 ...(cellxpertCxd && {

package/dist/components/DepositWithdrawal/Deposit/AurixPayQRPHDeposit/AurixPayQRPHDepositContext.d.ts

@@ -1,6 +1,6 @@
 export declare const AurixPayQRPHDepositContext: (props: {
     value: {
-        status: "idle" | "confirmed" | "failed" | "generating-qr-code" | "qr-code-generated";
+        status: "idle" | "generating-qr-code" | "qr-code-generated" | "failed" | "confirmed";
         deposit: import("../../../../types").Deposit | null;
         errorMessage: {
             name: string;
@@ -13,7 +13,7 @@ export declare const AurixPayQRPHDepositContext: (props: {
 } & {
     children?: import("react").ReactNode | undefined;
 }) => React.ReactNode, useAurixPayQRPHDepositContext: () => {
-    status: "idle" | "confirmed" | "failed" | "generating-qr-code" | "qr-code-generated";
+    status: "idle" | "generating-qr-code" | "qr-code-generated" | "failed" | "confirmed";
     deposit: import("../../../../types").Deposit | null;
     errorMessage: {
         name: string;

package/dist/components/DepositWithdrawal/Deposit/AurixPayQRPHDeposit/useAurixPayQRPHDeposit.d.ts

@@ -5,7 +5,7 @@ export interface GenerateQRCodeInput {
     promo?: string | null;
 }
 export declare function useAurixPayQRPHDeposit(): {
-    status: "idle" | "confirmed" | "failed" | "generating-qr-code" | "qr-code-generated";
+    status: "idle" | "generating-qr-code" | "qr-code-generated" | "failed" | "confirmed";
     deposit: Deposit | null;
     errorMessage: {
         name: string;

package/dist/components/DepositWithdrawal/Deposit/OnlineBankDeposit/OnlineBankDepositContext.d.ts

@@ -1,7 +1,7 @@
 export declare const OnlineBankDepositContext: (props: {
     value: {
         view: "form" | "vca";
-        status: "waiting" | "processing" | "failed" | "verification-waiting" | "verification-processing" | "verification-failed" | "verification-success";
+        status: "waiting" | "failed" | "processing" | "verification-waiting" | "verification-processing" | "verification-failed" | "verification-success";
         verify: () => void;
         reset: () => void;
         deposit: import("../../../../types").Deposit | null;
@@ -14,7 +14,7 @@ export declare const OnlineBankDepositContext: (props: {
     children?: import("react").ReactNode | undefined;
 }) => React.ReactNode, useOnlineBankDepositContext: () => {
     view: "form" | "vca";
-    status: "waiting" | "processing" | "failed" | "verification-waiting" | "verification-processing" | "verification-failed" | "verification-success";
+    status: "waiting" | "failed" | "processing" | "verification-waiting" | "verification-processing" | "verification-failed" | "verification-success";
     verify: () => void;
     reset: () => void;
     deposit: import("../../../../types").Deposit | null;

package/dist/components/DepositWithdrawal/Deposit/OnlineBankDeposit/useOnlineBankDeposit.d.ts

@@ -2,7 +2,7 @@ import type { Deposit } from '../../../../types';
 export type UseOnlineBankDepositReturn = ReturnType<typeof useOnlineBankDeposit>;
 export declare function useOnlineBankDeposit(): {
     view: "form" | "vca";
-    status: "waiting" | "processing" | "failed" | "verification-waiting" | "verification-processing" | "verification-failed" | "verification-success";
+    status: "waiting" | "failed" | "processing" | "verification-waiting" | "verification-processing" | "verification-failed" | "verification-success";
     verify: () => void;
     reset: () => void;
     deposit: Deposit | null;

package/dist/components/DepositWithdrawal/Deposit/QRPHDeposit/QRPHDepositContext.d.ts

@@ -1,6 +1,6 @@
 export declare const QRPHDepositContext: (props: {
     value: {
-        status: "idle" | "confirmed" | "failed" | "generating-qr-code" | "qr-code-generated";
+        status: "idle" | "generating-qr-code" | "qr-code-generated" | "failed" | "confirmed";
         deposit: import("../../../../types").Deposit | null;
         errorMessage: {
             name: string;
@@ -13,7 +13,7 @@ export declare const QRPHDepositContext: (props: {
 } & {
     children?: import("react").ReactNode | undefined;
 }) => React.ReactNode, useQRPHDepositContext: () => {
-    status: "idle" | "confirmed" | "failed" | "generating-qr-code" | "qr-code-generated";
+    status: "idle" | "generating-qr-code" | "qr-code-generated" | "failed" | "confirmed";
     deposit: import("../../../../types").Deposit | null;
     errorMessage: {
         name: string;

package/dist/components/DepositWithdrawal/Deposit/QRPHDeposit/useQRPHDeposit.d.ts

@@ -5,7 +5,7 @@ export interface GenerateQRCodeInput {
     promo?: string | null;
 }
 export declare function useQRPHDeposit(): {
-    status: "idle" | "confirmed" | "failed" | "generating-qr-code" | "qr-code-generated";
+    status: "idle" | "generating-qr-code" | "qr-code-generated" | "failed" | "confirmed";
     deposit: Deposit | null;
     errorMessage: {
         name: string;

package/dist/components/PortalProvider/PortalProvider.d.ts

@@ -4,4 +4,4 @@ export interface PortalProviderProps extends ProvidersProps {
     children: ReactNode;
     enablePushNotif?: boolean;
 }
-export declare function PortalProvider({ recaptchaSiteKey, isNonRegulated, children, enablePushNotif, }: PortalProviderProps): Promise<import("react/jsx-runtime").JSX.Element>;
+export declare function PortalProvider({ recaptchaSiteKey, googleFraudDefenseSiteKey, isNonRegulated, children, enablePushNotif, }: PortalProviderProps): Promise<import("react/jsx-runtime").JSX.Element>;

package/dist/components/PortalProvider/PortalProvider.js

@@ -15,7 +15,7 @@ import { SetupCellxpertCxd } from './SetupCellxpertCxd.js';
 import { SetupDomain } from './SetupDomain.js';
 import { Snackbar } from './Snackbar.js';
 import { SocialAccountLinkObserver } from './SocialAccountLinkObserver.js';
-export async function PortalProvider({ recaptchaSiteKey, isNonRegulated, children, enablePushNotif = true, }) {
+export async function PortalProvider({ recaptchaSiteKey, googleFraudDefenseSiteKey, isNonRegulated, children, enablePushNotif = true, }) {
     const queryClient = getQueryClient();
     await Promise.allSettled([
         prefetchPlatformQuery(),
@@ -23,5 +23,5 @@ export async function PortalProvider({ recaptchaSiteKey, isNonRegulated, childre
         prefetchAccountQuery(),
         prefetchWalletQuery(),
     ]);
-    return (_jsxs(Fragment, { children: [_jsx(Providers, { isNonRegulated: isNonRegulated, recaptchaSiteKey: recaptchaSiteKey, children: _jsxs(HydrationBoundary, { state: dehydrate(queryClient), children: [children, _jsx(SessionWatcher, {}), _jsx(Suspense, { children: _jsx(SetupDomain, {}) }), _jsx(Suspense, { children: _jsx(SetupCellxpertCxd, {}) }), _jsx(Suspense, { children: _jsx(SetupBtag, {}) }), _jsx(Suspense, { children: _jsx(AppOnlyComponents, { enablePushNotif: enablePushNotif }) })] }) }), _jsx(Snackbar, {}), _jsx(Suspense, { children: _jsx(SocialAccountLinkObserver, {}) }), _jsx(Suspense, { children: _jsx(FeatureFlag, {}) })] }));
+    return (_jsxs(Fragment, { children: [_jsx(Providers, { isNonRegulated: isNonRegulated, recaptchaSiteKey: recaptchaSiteKey, googleFraudDefenseSiteKey: googleFraudDefenseSiteKey, children: _jsxs(HydrationBoundary, { state: dehydrate(queryClient), children: [children, _jsx(SessionWatcher, {}), _jsx(Suspense, { children: _jsx(SetupDomain, {}) }), _jsx(Suspense, { children: _jsx(SetupCellxpertCxd, {}) }), _jsx(Suspense, { children: _jsx(SetupBtag, {}) }), _jsx(Suspense, { children: _jsx(AppOnlyComponents, { enablePushNotif: enablePushNotif }) })] }) }), _jsx(Snackbar, {}), _jsx(Suspense, { children: _jsx(SocialAccountLinkObserver, {}) }), _jsx(Suspense, { children: _jsx(FeatureFlag, {}) })] }));
 }

package/dist/components/PortalProvider/Providers.d.ts

@@ -2,5 +2,6 @@ import { type PropsWithChildren } from 'react';
 export interface ProvidersProps {
     recaptchaSiteKey?: string;
     isNonRegulated?: boolean;
+    googleFraudDefenseSiteKey?: string;
 }
-export declare function Providers({ recaptchaSiteKey, isNonRegulated, children, }: PropsWithChildren<ProvidersProps>): import("react/jsx-runtime").JSX.Element;
+export declare function Providers({ recaptchaSiteKey, googleFraudDefenseSiteKey, isNonRegulated, children, }: PropsWithChildren<ProvidersProps>): import("react/jsx-runtime").JSX.Element;

package/dist/components/PortalProvider/Providers.js

@@ -5,16 +5,20 @@ import { ReCaptchaProvider } from 'next-recaptcha-v3';
 import { useEffect } from 'react';
 import { useShallow } from 'zustand/shallow';
 import { useGlobalStore } from '../../client/hooks/useGlobalStore.js';
+import { GOOGLE_FRAUD_DEFENSE_SITE_KEY_STORAGE } from '../../constants/index.js';
 import { getQueryClient } from '../../utils/getQueryClient.js';
-export function Providers({ recaptchaSiteKey, isNonRegulated, children, }) {
+export function Providers({ recaptchaSiteKey, googleFraudDefenseSiteKey, isNonRegulated, children, }) {
     const queryClient = getQueryClient();
     const setIsNonRegulated = useGlobalStore(useShallow((ctx) => ctx.setIsNonRegulated));
-    // set a global store to check if the platform is non regulated
-    // use this through out the components as a checker if we need to bypass kyc checks
     useEffect(() => {
         if (isNonRegulated) {
             setIsNonRegulated(true);
         }
     }, [isNonRegulated, setIsNonRegulated]);
+    useEffect(() => {
+        if (googleFraudDefenseSiteKey) {
+            sessionStorage.setItem(GOOGLE_FRAUD_DEFENSE_SITE_KEY_STORAGE, googleFraudDefenseSiteKey);
+        }
+    }, [googleFraudDefenseSiteKey]);
     return (_jsx(QueryClientProvider, { client: queryClient, children: _jsx(ReCaptchaProvider, { reCaptchaKey: recaptchaSiteKey, children: children }) }));
 }

package/dist/constants/HeaderKey.d.ts

@@ -3,3 +3,4 @@ export declare const TEST_PASS_HEADER_KEY: string;
 export declare const DOMAIN_HEADER_KEY: string;
 export declare const SESSION_VERSION_HEADER_KEY: string;
 export declare const FINGERPRINT_HEADER_KEY: string;
+export declare const GOOGLE_FRAUD_DEFENSE_HEADER_KEY: string;

package/dist/constants/HeaderKey.js

@@ -3,3 +3,4 @@ export const TEST_PASS_HEADER_KEY = 'Test-Pass';
 export const DOMAIN_HEADER_KEY = 'Domain';
 export const SESSION_VERSION_HEADER_KEY = 'X-Session-Version';
 export const FINGERPRINT_HEADER_KEY = 'Fingerprint';
+export const GOOGLE_FRAUD_DEFENSE_HEADER_KEY = 'X-Recaptcha-Token';

package/dist/constants/StorageKey.d.ts

@@ -2,7 +2,8 @@ export declare const ACCESS_TOKEN_COOKIE_NAME: string;
 export declare const REFRESH_TOKEN_COOKIE_NAME: string;
 export declare const DOMAIN_COOKIE_NAME: string;
 export declare const BTAG_COOKIE_NAME: string;
-export declare const FEATURE_FLAG_LOCAL_STORAGE_KEY: string;
 export declare const CXD_STORAGE_KEY: string;
 export declare const TERMS_OF_USE_PENDING_STORAGE_KEY: string;
 export declare const DISCLAIMER_ACCEPTED_KEY: string;
+export declare const FEATURE_FLAG_LOCAL_STORAGE_KEY: string;
+export declare const GOOGLE_FRAUD_DEFENSE_SITE_KEY_STORAGE: string;

package/dist/constants/StorageKey.js

@@ -2,7 +2,8 @@ export const ACCESS_TOKEN_COOKIE_NAME = 'WebPortalAuthAccessToken';
 export const REFRESH_TOKEN_COOKIE_NAME = 'WebPortalAuthRefreshToken';
 export const DOMAIN_COOKIE_NAME = 'WebPortalDomain';
 export const BTAG_COOKIE_NAME = 'WebPortalBtag';
-export const FEATURE_FLAG_LOCAL_STORAGE_KEY = 'WebPortalFeatureFlag';
 export const CXD_STORAGE_KEY = 'WebPortalCellxpertCxd';
 export const TERMS_OF_USE_PENDING_STORAGE_KEY = 'TermsOfUsePending';
 export const DISCLAIMER_ACCEPTED_KEY = 'WebPortalDisclaimerAccepted';
+export const FEATURE_FLAG_LOCAL_STORAGE_KEY = 'WebPortalFeatureFlag';
+export const GOOGLE_FRAUD_DEFENSE_SITE_KEY_STORAGE = 'GoogleFraudDefenseSiteKey';

package/dist/handlers/postAuthenticate.js

@@ -1,7 +1,7 @@
 import { addDays, addMinutes, subMinutes } from 'date-fns';
 import { NextResponse } from 'next/server';
 import { z } from 'zod';
-import { ACCESS_TOKEN_COOKIE_NAME, DOMAIN_HEADER_KEY, RECAPTCHA_HEADER_KEY, REFRESH_TOKEN_COOKIE_NAME, } from '../constants/index.js';
+import { ACCESS_TOKEN_COOKIE_NAME, DOMAIN_HEADER_KEY, GOOGLE_FRAUD_DEFENSE_HEADER_KEY, RECAPTCHA_HEADER_KEY, REFRESH_TOKEN_COOKIE_NAME, } from '../constants/index.js';
 import { authenticate } from '../services/auth.js';
 const AuthenticateDefinition = z.object({
     type: z.literal('SECURITY_QUESTION'),
@@ -21,12 +21,14 @@ export async function postAuthenticate(request) {
         }, { status: 400 });
     }
     const recaptcha = request.headers.get(RECAPTCHA_HEADER_KEY);
+    const googleFraudDefense = request.headers.get(GOOGLE_FRAUD_DEFENSE_HEADER_KEY);
+    const recaptchaToken = googleFraudDefense ?? recaptcha;
     const domain = request.headers.get(DOMAIN_HEADER_KEY);
     try {
         const res = await authenticate(parsed.data, {
             headers: {
-                ...(recaptcha && {
-                    [RECAPTCHA_HEADER_KEY]: recaptcha,
+                ...(recaptchaToken && {
+                    [RECAPTCHA_HEADER_KEY]: recaptchaToken,
                 }),
                 ...(domain && {
                     [DOMAIN_HEADER_KEY]: domain,

package/dist/handlers/postSession.js

@@ -1,7 +1,7 @@
 import { addDays, addMinutes, subMinutes } from 'date-fns';
 import { NextResponse } from 'next/server';
 import { z } from 'zod';
-import { ACCESS_TOKEN_COOKIE_NAME, DOMAIN_HEADER_KEY, FINGERPRINT_HEADER_KEY, RECAPTCHA_HEADER_KEY, REFRESH_TOKEN_COOKIE_NAME, SESSION_VERSION_HEADER_KEY, } from '../constants/index.js';
+import { ACCESS_TOKEN_COOKIE_NAME, DOMAIN_HEADER_KEY, FINGERPRINT_HEADER_KEY, GOOGLE_FRAUD_DEFENSE_HEADER_KEY, RECAPTCHA_HEADER_KEY, REFRESH_TOKEN_COOKIE_NAME, SESSION_VERSION_HEADER_KEY, } from '../constants/index.js';
 import { createSession } from '../services/auth.js';
 const CreateSessionDefinition = z.union([
     z.object({
@@ -45,10 +45,12 @@ export async function postSession(request) {
     const versionSessionHeader = request.headers.get(SESSION_VERSION_HEADER_KEY);
     const versionSession = versionSessionHeader === 'Inplay' ? 'Inplay' : 'default';
     try {
+        const googleFraudDefense = request.headers.get(GOOGLE_FRAUD_DEFENSE_HEADER_KEY);
+        const recaptchaToken = googleFraudDefense ?? recaptcha;
         const res = await createSession(parsed.data, {
             headers: {
-                ...(recaptcha && {
-                    [RECAPTCHA_HEADER_KEY]: recaptcha,
+                ...(recaptchaToken && {
+                    [RECAPTCHA_HEADER_KEY]: recaptchaToken,
                 }),
                 ...(domain && {
                     [DOMAIN_HEADER_KEY]: domain,