Google reCAPTCHA Enterprise验证失败：应用默认凭证不可用及必填参数缺失问题求助

Let's work through your server-side issues with reCAPTCHA Enterprise step by step—starting with the credential problem, then tackling the "required parameter must be specified" error.

1. Fixing the Application Default Credentials Error #

First, let's resolve the initial java.io.IOException: The Application Default Credentials are not available error:

• Use the right credential type: AWS external account JSON won't work here—reCAPTCHA Enterprise requires a Google Cloud Service Account JSON credential. Make sure you downloaded the correct file from the Google Cloud Console (IAM & Admin > Service Accounts > Create Service Account > Create Key > JSON).
• Check permissions: Ensure your service account has the reCAPTCHA Enterprise Assessor role (or at minimum the recaptchaenterprise.assessments.create permission). Without this, even valid credentials will fail to authenticate.
• Validate your credential setup:
  • For Method 1 (environment variable): Double-check that GOOGLE_APPLICATION_CREDENTIALS points to the absolute path of your JSON file, and your application has read access to that file. Relative paths can cause issues depending on where your app runs.
  • For Method 2 (manual loading): Confirm jsonPath is an absolute path, and there are no file permission blocks preventing your app from reading the JSON. The scope you're using (https://www.googleapis.com/auth/cloud-platform) is correct for reCAPTCHA Enterprise, so that part is fine.

2. Resolving the "Required Parameter Must Be Specified" Error #

Now let's address the second error. Based on your createAssessment code, here are the most likely fixes:

• Remove the manual assessmentName: You're explicitly setting .setName(assessmentName) in the Assessment builder, but this parameter isn't required for the CreateAssessment request. Google automatically generates a unique name for assessments, and manually setting it can trigger validation issues. Delete this line.
• Verify parameter consistency:
  • Ensure projectID is your actual Google Cloud Project ID (not the display name—you can find this in the Cloud Console dashboard).
  • Confirm recaptchaSiteKey matches exactly what you're using on the client side (case-sensitive, no extra spaces).
  • The token must be a fresh, unused value from the client—tokens expire after a few minutes and can't be reused.
  • recaptchaAction must match the action name you specified in your client-side reCAPTCHA implementation exactly (this is case-sensitive too).

Modified createAssessment Code #

Here's the adjusted code with the problematic line removed and key checks highlighted:

public static void createAssessment(String projectID, String recaptchaSiteKey, String token, String recaptchaAction) throws IOException {
    try (RecaptchaEnterpriseServiceClient client = RecaptchaEnterpriseServiceClient.create()) {
        // Set the properties of the event to be tracked.
        Event event = Event.newBuilder()
                .setSiteKey(recaptchaSiteKey)
                .setToken(token)
                .build();
        // Build the assessment request (removed manual assessment name)
        CreateAssessmentRequest createAssessmentRequest = CreateAssessmentRequest.newBuilder()
                .setParent(ProjectName.of(projectID).toString())
                .setAssessment(Assessment.newBuilder().setEvent(event).build())
                .build();
        Assessment response = client.createAssessment(createAssessmentRequest);
        
        // Check if the token is valid.
        if (!response.getTokenProperties().getValid()) {
            System.out.println("The CreateAssessment call failed because the token was: "
                    + response.getTokenProperties().getInvalidReason().name());
            return;
        }
        // Check if the expected action was executed.
        if (!response.getTokenProperties().getAction().equals(recaptchaAction)) {
            System.out.println("The action attribute in your reCAPTCHA tag "
                    + "does not match the action you are expecting to score");
            return;
        }
        // Get the risk score and the reason(s).
        float recaptchaScore = response.getRiskAnalysis().getScore();
        System.out.println("The reCAPTCHA score is: " + recaptchaScore);
        for (ClassificationReason reason : response.getRiskAnalysis().getReasonsList()) {
            System.out.println(reason);
        }
    }
}

Final Pre-Test Checklist #

Before running your code again:

1. Confirm your service account has the correct permissions in Google Cloud IAM.
2. Double-check all parameters passed to createAssessment are accurate and match client-side values.
3. Ensure your credential file is accessible and correctly configured (either via environment variable or manual loading).

内容的提问来源于stack exchange，提问作者Joseph Suresh