Skip to content

Google Recaptcha missing-input-secret

The Valley of Code

Your Web Development Manual

Was trying to make Google Recaptcha work but kept getting failed attempts and the error missing-input-secret back.

After checking 100 times that my secret key was correct, I realized they want URL parameters in the POST request to validate the captcha value.

I was sending the values in the body:

const response = await fetch('https://www.google.com/recaptcha/api/siteverify', {
  method: "POST",
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    secret: CAPTCHA_SITE_SECRET,
    response: CAPTCHA_VALUE_FROM_CLIENT
  })
})

Instead, this worked:

const response = await fetch('https://www.google.com/recaptcha/api/siteverify?' 
	+ new URLSearchParams({
    secret: CAPTCHA_SITE_SECRET,
    response: CAPTCHA_VALUE_FROM_CLIENT
  }), {
  method: "POST",
})
→ Get my JavaScript Beginner's Handbook
→ Read my JavaScript Tutorials on The Valley of Code
→ Read my TypeScript Tutorial on The Valley of Code
  • THE VALLEY OF CODE (+ PRO), your web development manual
  • I wrote 15+ free coding BOOKS, download them here
  • SOLOPRENEUR LAND the missing MBA for wannabe solopreneurs craving a life with more freedom, control, fulfillment and purpose (summer 2024)