reCAPTCHA v3 Enterprise tokens

// recaptcha-v3-enterprise-node.js - solve reCAPTCHA v3 Enterprise and post the token with the
// form.
// Install: Node.js 18 or newer (no packages).
// Run: node recaptcha-v3-enterprise-node.js

const { setTimeout: sleep } = require('node:timers/promises');

// Your SurSolver API key.
const CLIENT_KEY = 'YOUR_API_KEY';
// The page that renders the widget, with its path and query string.
const TARGET_URL = 'https://example.com/page';
// The render= value of the api.js or enterprise.js script URL.
const SITE_KEY = 'YOUR_SITE_KEY';
// The action in the page's grecaptcha.execute(key, { action }) call.
const PAGE_ACTION = 'YOUR_PAGE_ACTION';
// The lowest score you need, from 0 to 1.
const MIN_SCORE = undefined;
// The object passed to grecaptcha.enterprise.render, such as { "s": "..." }, copied just before
// the solve.
const ENTERPRISE_PAYLOAD = undefined;
// Where the page posts the form (the form action, or the request in DevTools, Network).
const FORM_URL = 'https://example.com/submit';
// The form's other fields as a JSON object, such as {"username":"demo"}.
const FORM_FIELDS = undefined;
// Text that appears only in a response the site accepted.
const SUCCESS_TEXT = 'PASTE_ACCEPTED_MARKER';

const API = 'https://api.sursolver.com';
const POLL_ATTEMPTS = 60;

// API errors are HTTP 200 with errorId 1; anything else is a transport failure.
async function call(path, body) {
  const res = await fetch(`${API}${path}`, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify(body),
  });
  if (!res.ok) throw new Error(`HTTP ${res.status}`);
  const data = await res.json();
  if (data.errorId !== 0) throw new Error(`${data.errorCode}: ${data.errorDescription}`);
  return data;
}

async function solve(task) {
  const created = await call('/createTask', { clientKey: CLIENT_KEY, task });

  for (let attempt = 0; attempt < POLL_ATTEMPTS; attempt += 1) {
    const result = await call('/getTaskResult', {
      clientKey: CLIENT_KEY,
      taskId: created.taskId,
    });
    if (result.status === 'ready') return result.solution;
    await sleep(3000);
  }
  throw new Error(`task ${created.taskId} was not ready in ${POLL_ATTEMPTS} polls`);
}

// Optional task fields are sent only when they have a value.
function withoutEmpty(fields) {
  return Object.fromEntries(
    Object.entries(fields).filter(([, value]) => value !== undefined && value !== ''),
  );
}

async function main() {
  const solution = await solve({
    type: 'ReCaptchaV3EnterpriseTokenProxyLess',
    websiteURL: TARGET_URL,
    websiteKey: SITE_KEY,
    pageAction: PAGE_ACTION,
    ...withoutEmpty({
      minScore: MIN_SCORE,
      enterprisePayload: ENTERPRISE_PAYLOAD,
    }),
  });

  // Send the token the way the page does; some sites name it differently or send JSON.
  const headers = { 'Content-Type': 'application/x-www-form-urlencoded' };
  // The solver reports a user agent only for some solves; present it when it does.
  if (solution.userAgent) headers['User-Agent'] = solution.userAgent;
  const body = new URLSearchParams({
    ...(FORM_FIELDS ?? {}),
    ['g-recaptcha-response']: solution.gRecaptchaResponse,
  });
  const response = await fetch(FORM_URL, { method: 'POST', headers, body });
  const text = await response.text();
  if (!response.ok || !text.includes(SUCCESS_TEXT)) {
    throw new Error(`The site did not accept the result (HTTP ${response.status}).`);
  }
  console.log('The site accepted the result.');
}

main().catch((error) => {
  console.error(error);
  process.exitCode = 1;
});