Update main.py

main.py

@@ -104,8 +104,25 @@ async def login_post(
     request: Request,
     email: str = Form(...),
     password: str = Form(...),
+    recaptcha_token: str = Form(...),
     db: Session = Depends(get_db)
 ):
+        # Perform reCAPTCHA verification first
+    
+    recaptcha_secret = '6LeSJgwpAAAAAJrLrvlQYhRsOjf2wKXee_Jc4Z-k'  # Replace with your reCAPTCHA secret key
+    recaptcha_url = 'https://www.google.com/recaptcha/api/siteverify'
+    recaptcha_data = {
+        'secret': recaptcha_secret,
+        'response': recaptcha_token
+    }
+    
+    async with httpx.AsyncClient() as client:
+        recaptcha_response = await client.post(recaptcha_url, data=recaptcha_data)
+    
+    recaptcha_result = recaptcha_response.json()
+    print(recaptcha_result)  # or use proper logging
+    if not recaptcha_result.get('success', False):
+        raise HTTPException(status_code=400, detail="reCAPTCHA validation failed.")
     if not email or not password:
         raise HTTPException(status_code=400, detail="Invalid email or password")