they called a retroactive incident, hopefully will get a retro status page as well

CChaika they called a retroactive incident, hopefully will get a retro status page as we...

A

ajgeiss0702•4/30/24, 4:36 PM

nice. thanks for the updates

C

ChaikaOP•4/30/24, 4:56 PM

one retroactive status page: https://www.cloudflarestatus.com/incidents/j7b510cd4lhm

Issues passing Challenge Pages and Turnstile

A

ajgeiss0702•4/30/24, 4:57 PM

nice. Thanks for the quick action!

Bbewo that turnstile challenge looks distorted, care to describe how you ended up ther...

S

sabin•4/30/24, 6:02 PM

Coinbase wallet app > notifications

SSebastian why does `turnstile.reset` create a new browser history entry?

S

Sebastian•4/30/24, 10:15 PM

does anyone have any information regarding this?

S

Sebastian•4/30/24, 10:15 PM

it's 100% a turnstile issue, i can open developer console and run

turnstile.reset()

turnstile.reset()

turnstile.reset()

turnstile.reset() and every time i do, a new browser history entry is created

M

mia. ❤•5/1/24, 1:55 AM

how do i restart a turnstile captcha? i tried reset and that doesn't seem to do anything

K

Kasumi•5/2/24, 9:06 AM

Currently again in Turnstile loop again :kitty_dead:

K

Kasumi•5/2/24, 9:07 AM

Is it planned to make turnstile less unfunctional? Because Turnstile is currently toooo strict

K

Kasumi•5/2/24, 9:11 AM

I click on the verification box it reloads the page and I've to do it again

K

Kasumi•5/2/24, 9:12 AM

87d6e22ef9685b19-VIE
87d6e2a9b9245aeb-VIE
After I made the captcha request

K

Kasumi•5/2/24, 9:12 AM

87d6e32d7dfb5aeb-VIE <- Before 🤖turnstile

K

Kasumi•5/2/24, 9:13 AM

Already tried deleting the Website Data and cookies but this also doesnt help

K

Kasumi•5/2/24, 9:14 AM

(It reloaded itself rn thats now the current one: 87d6e6955edf5aeb-VIE)

Original message was deleted

K

Kasumi•5/2/24, 11:13 AM

tbh ive intel i5

K

Kasumi•5/2/24, 11:14 AM

if it has problems idk. just ram issues becauseof kde x3

Original message was deleted

K

Kasumi•5/2/24, 11:28 AM

I dont have more informations

K

Kasumi•5/2/24, 11:28 AM

but its currently just on this page

M

manoky•5/2/24, 1:58 PM

Hi guys, I'm working on turnstile implementation now and according to this blog post https://blog.cloudflare.com/integrating-turnstile-with-the-cloudflare-waf-to-challenge-fetch-requests you can use turnstile in pre-clearance mode for WAF challenge. However, I'm still not able to get pre-clearance even it I get the turnstile token in the callback. any advise?

The Cloudflare Blog

Integrating Turnstile with the Cloudflare WAF to challenge fetch re...

By editing or creating a new Turnstile widget with “Pre-Clearance” enabled, Cloudflare customers can now use Turnstile to issue a challenge when a page’s HTML loads, and enforce that all valid responses have a valid Turnstile token. They can then write a Cloudflare WAF rule to challenge all requests to their API. The Cloudflare WAF will check fo...

Bbewo pretty hard to help with such general inquiries tbh

M

manoky•5/2/24, 2:59 PM

WAF managed rule is activated for the Backend endpoints so how when I do any XML http request it fails returning 403. in regard to this I was asking if turnstile can issue a clearance to satify the WAF rule on the BE endpoint in cloudflare. at the moment it returns a token but preClearanceObtained is always false

Bbewo are you using turnstile on the same zone as the challenge is on?

M

manoky•5/2/24, 3:04 PM

I will have to check with the other guys, in this case does zone refer to the region or something like that? excuse my ignorance, I fairly new to this.

Bbewo does the widget/sitekey have pre-clearance enabled? whats the sitekey?

M

manoky•5/2/24, 3:12 PM

yeah it has pre-clearance enabled

Bbewo does the widget/sitekey have pre-clearance enabled? whats the sitekey?

M

manoky•5/2/24, 3:19 PM

I the turnstile dashboard settings, pre-clearance is set to yes.

Original message was deleted

M

manoky•5/2/24, 3:54 PM

At the moment yes. but we added the domain on turnstile domains. the issue here is on web it's the same domain but on mobile the domain will change. but regardless of platform I'm running into this issue.

Original message was deleted

M

manoky•5/2/24, 4:17 PM

I see, is there a way to solve the challenge in a situation like this where the origin is different? any resource to take a look at?

Original message was deleted

M

manoky•5/2/24, 4:21 PM

right.

M

manoky•5/2/24, 4:23 PM

@Leo and @cf-Benedikt thanks for the help.

T

Travis•5/2/24, 11:29 PM

Can someone give me some ideas as to how I can get to the bottom of turnstiles not working -on ANY website- on my (newest, Windows) Firefox? No matter what I do it always tells me to click the checkbox to verify I'm human - then it spins, then it reloads the same page and wants me to do it again. This has been going on for like a week and I haven't been able to pass once.. But it works perfectly fine with Chrome.

I've done the following to try and debug this:

Disabled ALL extensions, including adblockers, firefox built in tracking protections, etc
Attempted in private window, cleared cookies/data for cloudflare domains
Run in "troubleshooting mode" which again disables extensions and resets settings I believe
Changed my IP address (residential, never on a VPN)
Double checked my system time/what sites report as my browser time is correct

Not an experienced web developer but I have a small site on Cloudflare, so I set up a test page with a turnstile to try and figure it out, and on Firefox it just immediately says Failure! (and no turnstile data gets passed with the form), but when I view it with Chrome and click verify it works and the form submit where I dump the response data shows it was successful. I should note that it references error 600010 in Firefox, but there are obviously no errors in Chrome since it passes when clicking.

There are numerous posts/bug reports in the past few days with the new Firefox having tons of problems with recaptcha (Google's), but I haven't found any referencing Cloudflare's implementation.

K

kian•5/2/24, 11:38 PM

What's the Firefox version? I can't reproduce it on 125.0.3 on Windows, and it doesn't say there's any updates available

Kkian What's the Firefox version? I can't reproduce it on 125.0.3 on Windows, and it d...

T

Travis•5/2/24, 11:39 PM

Yeah 125.0.3 the newest. I should note that I don't seem to have any issues on my laptop which is running Linux 125.0.2, and that one is usually on a VPN so if anything that one should be more likely to run into issues imo

T

Travis•5/3/24, 12:26 AM

I made a completely new browser profile and restored most of my stuff (extensions, bookmarks etc) and it seems to be working. Strange since I hadn't made any changes to my settings or extensions in a long time, but at least it's working now.

N

Niklas•5/3/24, 5:00 PM

Hey guys, could you help me maybe? I'm using sveltekit as framework.
My code:

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

On page loading, this happens:

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

I

Isaac McFadyen•5/3/24, 5:01 PM

?PAT-401

F

Flare•5/3/24, 5:01 PM

Seeing a 401 error in your console during a Turnstile security check?
You can safely ignore the error, it's requesting a PAT but your device/browser does not support PATs yet, so you see the error.
Learn more: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/

I

Isaac McFadyen•5/3/24, 5:02 PM

TLDR: You can ignore the browser error, if Turnstile's working then great, otherwise the issue is somewhere else and is unrelated to the 401

N

Niklas•5/3/24, 5:02 PM

Thanks, I will search for the real issue

I

Isaac McFadyen•5/3/24, 5:03 PM

If you're using Turnstile make sure that the page is fully loaded before you invoke Turnstile

I

Isaac McFadyen•5/3/24, 5:03 PM

One way you can do that is by adding the script tag inside

onMount()

onMount()

onMount()

onMount() on SvelteKit

N

Niklas•5/3/24, 5:07 PM

I'll try, thanks!

N

Niklas•5/3/24, 5:25 PM

I wanted to try the npm package, still not working

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

And this is the output:

they called a retroactive incident, hopefully will get a retro status page as well

Similar Threads

Similar Threads

Similar Threads