iUdZddlmZddlZddlZddlZddlmZmZmZddl m Z ddl m Z iZded<d Zd Zdd Zdd Zdd ZddZddZy)ux services/captcha_service.py — CAPTCHA Service ============================================== Replaces the emoji-based AI captcha with a reliable math CAPTCHA. Reasons: - Emoji grids are ambiguous and frustrating (what counts as a "vehicle"?) - OpenAI returns different emoji sets each time — hard to verify - Math challenges are unambiguous, instant, and work offline Flow: 1. GET /api/auth/captcha/challenge → server generates math question, stores answer 2. POST /api/auth/captcha/verify → candidate submits answer, server checks it 3. On success → issues a short-lived captcha_token (used in login) ) annotationsN)datetime timedeltatimezone)settings)json_dbzdict[str, dict] _challenges ctjgd}|dk(rmtjdd}tjdd}tjddg}|dk(r ||kDr||}}|dk(r||zn||z }d|d |d |d }ntjd d g}|d k(r;tjdd }tjdd }||z}d|d|d }nVtjdd }tjdd}tjdd}||z|z}d|d|d|d }|t||dS)zCGenerate a random arithmetic challenge. Returns {question, answer}.)easyr mediumr  +-zWhat is  ?mulchain u × r z + )questionanswer answer_int)randomchoicerandintstr)levelabopansqvariantcs a/Users/priyanka/Documents/Gols_Ai_Dev/public_hub_candidate/people_hub/services/captcha_service.py_make_math_challenger+#sS MM4 5E  NN1b ! NN1b ! ]]C: & 9QaqAsq1uQqc2$as! $-- 01 e q!$Aq!$Aa%C1#T!A&Aq!$Aq!$Aq!$Aa%!)C1#S3qc+ASXS AAct}tjd}tjt j ttz}|d|dddt|<|d|dd S) um Generate a new math CAPTCHA challenge. Returns the question to the client — never the answer. )minutesrFr)r expires_atusedattemptsmathr) session_idchallenge_typer) r+secrets token_urlsafernowrutcr_EXPIRY_MINUTESr )challenge_datar4r0s r*create_challenger<Csq *+N&&r*Jhll+i.PPJ%X.  K % (4 r,cBtj|dtS)zs Generate a fresh challenge, invalidating the old one. Called when the user clicks the Refresh button. N)r popr<)r4s r*refresh_challenger?[s OOJ%  r,ctjtj}tj Dcgc]\}}||dkDs|}}}|D]}tj |dtj|}|sdddddS||dkDrtj |ddddddS|drddd ddS|jd d d z|d <|d tkDrtj |dddd ddSt|xsdjj}t|djj}||k7rt|d z } ddd| dddSd|d<tjd} tjt j"| |dtj$dd| dddScc}}w)zU Verify the candidate's math answer. Returns {verified, token, message}. r0NFzCChallenge expired or not found. Please click Refresh and try again.T)verifiedtokenmessagerefreshz6Challenge expired. Please click Refresh for a new one.r1z>This challenge was already used. Please refresh for a new one.r2rrz6Too many attempts. Please refresh for a new challenge.rzIncorrect answer. z attempt(s) remaining. ) captcha_tokenr4rA created_atuVerification successful ✓)rr8rr9r itemsr>get _MAX_ATTEMPTSr!striplowerr6r7dbinsertr SESSIONS_FILEnow_iso) r4rr8kvexpired challenge submittedcorrect remainingrBs r*verify_challengerYes ,,x|| $C(..0J0TQC!L/4Iq0GJ 4  +I ]    Y| $$ D)P   X   &MM*a81rhsW # 22 " _! B@0Nbr,