There is no REST API for verifying turnstile. The verifying is a part of https://developers.cloudfla

There is no REST API for verifying turnstile. The verifying is a part of https://developers.cloudflare.com/turnstile/

Cloudflare Turnstile · Cloudflare Turnstile docs

Turnstile is Cloudflare’s smart CAPTCHA alternative. It can be embedded into any website without sending traffic through Cloudflare and works without …

CCyb3r-Jak3 There is no REST API for verifying turnstile. The verifying is a part of https:/...

lokiwind•5/6/23, 2:43 PM

What I want to do:
I want to query the user coming with Workers with invisible captcha with turnsitle and if it is not a malicious bot, I want to write code that finishes the process with return fetch request

lokiwind•5/6/23, 2:44 PM

How do I know if the incoming request has successfully passed the invisible captcha

Llokiwind How do I know if the incoming request has successfully passed the invisible capt...

Cyb3r-Jak3OP•5/6/23, 2:49 PM

Might be worth asking in #

turnstile-beta

lokiwind•5/6/23, 2:54 PM

@Cyb3r-Jok3 @HardAtWork

HHello, I’m Allie!The public key is in the cert

dave•5/6/23, 4:15 PM

Of the CA?

Llokiwind What I want to do: I want to query the user coming with Workers with invisible c...

dave•5/6/23, 4:16 PM

You could use the bot score.

Ddave You could use the bot score.

dave•5/6/23, 4:20 PM

@lokiwind this is what we have as a request header transform rule.

lokiwind•5/6/23, 4:22 PM

Hmm

lokiwind•5/6/23, 4:22 PM

Thank you for information

lokiwind•5/6/23, 4:22 PM

But

lokiwind•5/6/23, 4:23 PM

I write a workers code with Cloudflare invisible catpcha and place it in front of my website

lokiwind•5/6/23, 4:23 PM

I make a layer7 attack on my website for testing and bots can pass the invisible captcha system and access my website

Llokiwind I write a workers code with Cloudflare invisible catpcha and place it in front o...

dave•5/6/23, 4:23 PM

You can just pass the captcha data result in the body of the request.

Original message was deleted

lokiwind•5/6/23, 4:25 PM

Yes

Ddave You can just pass the captcha data result in the body of the request.

lokiwind•5/6/23, 4:25 PM

Yes, I did. I think I'm doing something wrong

Original message was deleted

dave•5/6/23, 4:26 PM

Fair.

Kasumi•5/6/23, 4:38 PM

Is it possible to just disable this for one sub domain?

lokiwind•5/6/23, 4:39 PM

Yes

Cyb3r-Jak3OP•5/6/23, 4:39 PM

?abuse

Flare•5/6/23, 4:39 PM

If you feel that a site is engaging in illegal or inappropriate activities, you can submit an abuse report at https://abuse.cloudflare.com/. The Trust and Safety team will then review the details and reply if appropriate. You can also report the site to your relevant local authorities. Reports cannot be filed via Discord or individual employees.

Llokiwind Yes

Kasumi•5/6/23, 4:39 PM

How? I cant find anything in the Rules or so

lokiwind•5/6/23, 4:40 PM

You don't want to apply a rule to a specific url path address, right?

Llokiwind You don't want to apply a rule to a specific url path address, right?

Kasumi•5/6/23, 4:41 PM

Na just for the sub domain