(import sh)
(import json)

(defn verify
  [secret-key response]
  (def resp
    (->
      (sh/$$
          ["curl"
           "--max-time" "10"
           "-X" "POST"
           "https://www.google.com/recaptcha/api/siteverify"
           "-F" (string "secret=" secret-key]))
           "-F" (string "response=" response)]
           :redirects [[stderr :discard]]) # XXX report as part of error?
      (json/decode)))
  (def success (get resp "success" false))
  (when (and (not success) (resp "error-codes"))
    (error (printf "recaptcha error: %j" resp)))
  success)