Overview
When you specify an action name in each place you execute reCAPTCHA, you enable the following features:
- Adaptive risk analysis based on the context of the action, because abusive behavior can vary.
- Filtering and grouping of score metrics by action in Stackdriver.
When interpreting assessments, it's important to verify that the action name in the Assessment matches the one you provided. Otherwise, it could be a sign that an attacker has generated the token from a different location on the site.
Recommendations
It's recommended that you use unique action names throughout your site, which correspond to user-initiated events. Actions can refer to page transitions or API calls such as XHRs. Here are some examples:
- LOGIN
- PASSWORD_RESET
- ADD_TO_CART
- CHECKOUT
- GET_PRICE
- PLAY_SONG