const response = await fetch(`${API_URL}/ventrata/checkout/config`, {   ...commonFetchOptions,
});  

if (!response.ok) {
   throw new Error("Unable to load the Ventrata checkout configuration");
}  

const checkoutConfig = await response.json();
const recaptchaSiteKey = checkoutConfig.recaptchaEnterpriseSiteKey;

if (!recaptchaSiteKey) {
   throw new Error("The checkout does not provide a reCAPTCHA site key");
}

async function createRecaptchaToken(action) {
   await loadRecaptchaEnterprise(recaptchaSiteKey);

   let lastError;    for (
     let attempt = 1;
     attempt <= RECAPTCHA_EXECUTE_ATTEMPTS;
     attempt++
   ) {
     try {
       const token = await window.grecaptcha.enterprise.execute(
         recaptchaSiteKey,
         { action },
       );

       if (typeof token !== "string" || token.length === 0) {
         throw new Error("reCAPTCHA Enterprise returned an empty token");
       }

       return token;
     } catch (error) {
       lastError = error;

       if (attempt < RECAPTCHA_EXECUTE_ATTEMPTS) {
         await delay(RECAPTCHA_EXECUTE_RETRY_DELAY_MS);
       }
     }
   }
   reportRecaptchaFailure("recaptcha.token_failed", lastError, { action });
   throw lastError;
}

{
   "currency": "USD",
   "recaptchaEnterprise": {
     "token": "CART_ADD_TOKEN"
   } 
}

{
  "currency": "USD",
  "cardPayment": {
    "gateway": "adyen",
    "adyen": {
      "sessionId": "ADYEN_SESSION_ID",
      "sessionResult": "ADYEN_SESSION_RESULT"
    },
    "recaptchaEnterprise": {
      "token": "PURCHASE_TOKEN"
    }
  }
}

{
   "currency": "USD",
   "recaptchaEnterprise": {
     "token": "CART_ADD_TOKEN"
   },
   "cardPayment": {
     "gateway": "adyen",
     "recaptchaEnterprise": {
       "token": "PURCHASE_TOKEN"
     }
   }
}

{
   "email": "[email protected]",
   "recaptchaEnterprise": {
     "token": "LOGIN_TOKEN"
   } 
}

{
   "error": "BAD_REQUEST",
   "errorMessage": "A new Google reCAPTCHA token is required",
   "errorCode": "RECAPTCHA_REQUIRED",
   "reason": "MISSING" 
}

function isRecaptchaRequired(data) {
   return data?.errorCode === "RECAPTCHA_REQUIRED";
 }

async function withRecaptchaRetry(action, sendRequest) {
   const maximumAttempts = 3;

   for (let attempt = 1; attempt <= maximumAttempts; attempt++) {
     let token = null;

     try {
       token = await createRecaptchaToken(action);
     } catch (error) {
       // Sending null lets Ventrata return the explicit retryable error.
       reportRecaptchaFailure("recaptcha.request_token_unavailable", error, {
         action,
         requestAttempt: attempt,
       });
     }

   const response = await sendRequest(token);
   const data = await response.json();

   if (response.ok) {
       return data;
   }

   if (!isRecaptchaRequired(data) || attempt === maximumAttempts) {
       const error = new Error(
         data.errorMessage || data.error || "The request failed",
      );
      error.response = data;
      throw error;
   }

   if (token === null) {
       await delay(2_000);
    }
  } 
}

const order = await withRecaptchaRetry("cart_add", (token) =>
   fetch(`${API_URL}/orders`, {
     ...commonFetchOptions,
     method: "POST",
     headers: {
       ...commonFetchOptions.headers,
       "Content-Type": "application/json",
       "Octo-Capabilities": "ventrata/checkout,octo/cart",
     },
     body: JSON.stringify({
       currency: "USD",
       recaptchaEnterprise: { token },
     }),
   }),
 );

script-src https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/; 
frame-src https://www.recaptcha.net/recaptcha/ https://recaptcha.google.com/recaptcha/; 
connect-src https://www.recaptcha.net/recaptcha/;