TrueLens vs reCAPTCHA:
Which Bot Detection
Is Right for You?

// 1. Add to every HTML page
<script src="https://www.google.com/
  recaptcha/api.js"></script>

// 2. Client-side token generation
grecaptcha.ready(function() {
  grecaptcha.execute(
    'YOUR_SITE_KEY',
    { action: 'signup' }
  ).then(function(token) {
    // attach to your form
    form.token.value = token;
  });
});

// 3. Server-side score verify
const r = await fetch(
  'https://www.google.com/
  recaptcha/api/siteverify',
  { /* POST token + secret */ }
);
const { score } = await r.json();

// 4. Decide threshold yourself
if (score < 0.5) rejectSignup();

// 1. Create a verification session
const session = await fetch(
  '/api/verify/init',
  {
    method: 'POST',
    headers: {
      'X-API-Key': process.env
        .TRUELENS_API_KEY
    }
  }
).then(r => r.json());

// 2. Redirect user for face scan
res.redirect(session.redirect_url);

// 3. Confirm result on callback
const result = await fetch(
  `/api/verify/status/
  ${verification_id}`,
  { headers: { 'X-API-Key': key } }
).then(r => r.json());

// "verified" or "failed" — done
if (result.status !== 'verified')
  rejectSignup();