Changes

api/Controllers/CaptchaController.cs

@@ -4,6 +4,7 @@ using Microsoft.Extensions.Options;
 using Models.Settings;
 using Swashbuckle.AspNetCore.Annotations;
 using Models.Requests;
+using Shared.Models.Responses;
 
 namespace Api.Controllers
 {
@@ -42,17 +43,26 @@ namespace Api.Controllers
         [HttpPost("verify")]
         [SwaggerOperation(Summary = "Verify captcha token")]
         [ProducesResponseType(StatusCodes.Status200OK)]
-        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(typeof(ErrorResponse), StatusCodes.Status400BadRequest)]
+        [SwaggerResponse(StatusCodes.Status400BadRequest, "Captcha verification failed or token missing", typeof(ErrorResponse))]
         public async Task<IActionResult> Verify([FromBody] CaptchaVerifyRequest req, CancellationToken ct)
         {
-            if (req is null || string.IsNullOrWhiteSpace(req.Token)) return BadRequest(new { error = "Missing token" });
+            if (req is null || string.IsNullOrWhiteSpace(req.Token))
+            {
+                return BadRequest(new ErrorResponse { Error = "Missing token", Code = "captcha_token_missing" });
+            }
 
             var userIp = HttpContext.Connection.RemoteIpAddress?.ToString();
             var verdict = await _captcha.VerifyAsync(req.Token, userIp, req.ExpectedAction, ct);
             if (!verdict.Success)
             {
                 _log.LogWarning("Captcha failed. ip={Ip} score={Score} err={Err}", userIp, verdict.Score, verdict.Error);
-                return BadRequest(new { error = "Captcha verification failed.", score = verdict.Score });
+                return BadRequest(new ErrorResponse
+                {
+                    Error = "Captcha verification failed.",
+                    Code = "captcha_verification_failed",
+                    Score = verdict.Score
+                });
             }
 
             return Ok(verdict);