(It reloaded itself rn thats now the current one: 87d6e6955edf5aeb-VIE)

Original message was deleted

K

KasumiOP•5/2/24, 11:13 AM

tbh ive intel i5

K

KasumiOP•5/2/24, 11:14 AM

if it has problems idk. just ram issues becauseof kde x3

Original message was deleted

K

KasumiOP•5/2/24, 11:28 AM

I dont have more informations

K

KasumiOP•5/2/24, 11:28 AM

but its currently just on this page

M

manoky•5/2/24, 1:58 PM

Hi guys, I'm working on turnstile implementation now and according to this blog post https://blog.cloudflare.com/integrating-turnstile-with-the-cloudflare-waf-to-challenge-fetch-requests you can use turnstile in pre-clearance mode for WAF challenge. However, I'm still not able to get pre-clearance even it I get the turnstile token in the callback. any advise?

The Cloudflare Blog

Integrating Turnstile with the Cloudflare WAF to challenge fetch re...

By editing or creating a new Turnstile widget with “Pre-Clearance” enabled, Cloudflare customers can now use Turnstile to issue a challenge when a page’s HTML loads, and enforce that all valid responses have a valid Turnstile token. They can then write a Cloudflare WAF rule to challenge all requests to their API. The Cloudflare WAF will check fo...

Bbewo pretty hard to help with such general inquiries tbh

M

manoky•5/2/24, 2:59 PM

WAF managed rule is activated for the Backend endpoints so how when I do any XML http request it fails returning 403. in regard to this I was asking if turnstile can issue a clearance to satify the WAF rule on the BE endpoint in cloudflare. at the moment it returns a token but preClearanceObtained is always false

Bbewo are you using turnstile on the same zone as the challenge is on?

M

manoky•5/2/24, 3:04 PM

I will have to check with the other guys, in this case does zone refer to the region or something like that? excuse my ignorance, I fairly new to this.

Bbewo does the widget/sitekey have pre-clearance enabled? whats the sitekey?

M

manoky•5/2/24, 3:12 PM

yeah it has pre-clearance enabled

Bbewo does the widget/sitekey have pre-clearance enabled? whats the sitekey?

M

manoky•5/2/24, 3:19 PM

I the turnstile dashboard settings, pre-clearance is set to yes.

Original message was deleted

M

manoky•5/2/24, 3:54 PM

At the moment yes. but we added the domain on turnstile domains. the issue here is on web it's the same domain but on mobile the domain will change. but regardless of platform I'm running into this issue.

Original message was deleted

M

manoky•5/2/24, 4:17 PM

I see, is there a way to solve the challenge in a situation like this where the origin is different? any resource to take a look at?

Original message was deleted

M

manoky•5/2/24, 4:21 PM

right.

M

manoky•5/2/24, 4:23 PM

@Leo and @cf-Benedikt thanks for the help.

T

Travis•5/2/24, 11:29 PM

Can someone give me some ideas as to how I can get to the bottom of turnstiles not working -on ANY website- on my (newest, Windows) Firefox? No matter what I do it always tells me to click the checkbox to verify I'm human - then it spins, then it reloads the same page and wants me to do it again. This has been going on for like a week and I haven't been able to pass once.. But it works perfectly fine with Chrome.

I've done the following to try and debug this:

Disabled ALL extensions, including adblockers, firefox built in tracking protections, etc
Attempted in private window, cleared cookies/data for cloudflare domains
Run in "troubleshooting mode" which again disables extensions and resets settings I believe
Changed my IP address (residential, never on a VPN)
Double checked my system time/what sites report as my browser time is correct

Not an experienced web developer but I have a small site on Cloudflare, so I set up a test page with a turnstile to try and figure it out, and on Firefox it just immediately says Failure! (and no turnstile data gets passed with the form), but when I view it with Chrome and click verify it works and the form submit where I dump the response data shows it was successful. I should note that it references error 600010 in Firefox, but there are obviously no errors in Chrome since it passes when clicking.

There are numerous posts/bug reports in the past few days with the new Firefox having tons of problems with recaptcha (Google's), but I haven't found any referencing Cloudflare's implementation.

K

kian•5/2/24, 11:38 PM

What's the Firefox version? I can't reproduce it on 125.0.3 on Windows, and it doesn't say there's any updates available

Kkian What's the Firefox version? I can't reproduce it on 125.0.3 on Windows, and it d...

T

Travis•5/2/24, 11:39 PM

Yeah 125.0.3 the newest. I should note that I don't seem to have any issues on my laptop which is running Linux 125.0.2, and that one is usually on a VPN so if anything that one should be more likely to run into issues imo

T

Travis•5/3/24, 12:26 AM

I made a completely new browser profile and restored most of my stuff (extensions, bookmarks etc) and it seems to be working. Strange since I hadn't made any changes to my settings or extensions in a long time, but at least it's working now.

N

Niklas•5/3/24, 5:00 PM

Hey guys, could you help me maybe? I'm using sveltekit as framework.
My code:

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

<script>
    let clientToken = writable('');

    async function sendContact(e) {
        e.preventDefault();

        await fetch('server/sendMail', {
            method: 'POST',
            headers: {
                'content-type': 'application/json'
            },
            body: JSON.stringify({
                token: $clientToken
            })
        });
    }

    window.onloadTurnstileCallback = function () {
                console.log("Turnstile loading"); //This log display in the console
        turnstile.render('#captcha', {
            sitekey: 'token',
            callback: function (token) {
                $clientToken = token;
                console.log(`Challenge Success ${token}`);
            }
        });
    };
</script>

<svelte:head>
    <script
        src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"
        defer
    ></script>
</svelte:head>

On page loading, this happens:

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

GET https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87e1cb03ee6e35c4/1714755477508/1f4f92f5431f0de2688a0caf1ccc19089be777b698417bbf1df40971a567481e/YFnG_VngDYwvIwm [HTTP/3 401  33ms]

I

Isaac McFadyen•5/3/24, 5:01 PM

?PAT-401

F

Flare•5/3/24, 5:01 PM

Seeing a 401 error in your console during a Turnstile security check?
You can safely ignore the error, it's requesting a PAT but your device/browser does not support PATs yet, so you see the error.
Learn more: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/

I

Isaac McFadyen•5/3/24, 5:02 PM

TLDR: You can ignore the browser error, if Turnstile's working then great, otherwise the issue is somewhere else and is unrelated to the 401

N

Niklas•5/3/24, 5:02 PM

Thanks, I will search for the real issue

I

Isaac McFadyen•5/3/24, 5:03 PM

If you're using Turnstile make sure that the page is fully loaded before you invoke Turnstile

I

Isaac McFadyen•5/3/24, 5:03 PM

One way you can do that is by adding the script tag inside

onMount()

onMount()

onMount()

onMount() on SvelteKit

N

Niklas•5/3/24, 5:07 PM

I'll try, thanks!

N

Niklas•5/3/24, 5:25 PM

I wanted to try the npm package, still not working

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

<script>
    import { onMount } from 'svelte';
    import { Turnstile } from 'svelte-turnstile';

    let mounted = false;
    onMount(() => {
        mounted = true;
    });
</script>


{#if mounted}
  <Turnstile
    siteKey="token"
    theme="light"
    language="de"
    on:turnstile-callback={(token) => {
      console.log('token:' + token);
      console.log('token string:' + JSON.stringify(token));
    }}
  />
{/if}

And this is the output:

I

Isaac McFadyen•5/3/24, 5:29 PM

So Turnstile is working there it seems, you're just not passing the challenge?

I

Isaac McFadyen•5/3/24, 5:29 PM

Can you show an actual image of the Turnstile widget? And can you try the following steps?

I

Isaac McFadyen•5/3/24, 5:29 PM

?turnstile-issues

F

Flare•5/3/24, 5:29 PM

If you're having trouble passing Cloudflare Turnstile challenges, you can try taking the following steps:

Check your browser and use a different one if necessary. Cloudflare Turnstile supports the latest versions of popular browsers but some forks (such as Pale Moon) are not supported. See this link for more info: https://developers.cloudflare.com/fundamentals/get-started/concepts/cloudflare-challenges/#supported-browsers
Disable your browser extensions. Sometimes browser extensions can cause Turnstile to block your browser.
Scan your computer for malware (for example, using a free tool such as Malwarebytes). Sometimes malware can cause Cloudflare Turnstile to detect your computer as malicious and block it.

IIsaac McFadyen Can you show an actual image of the Turnstile widget? And can you try the follow...

N

Niklas•5/3/24, 5:32 PM

sure, firefox developer is up to date and there is the widget:

I

Isaac McFadyen•5/3/24, 5:32 PM

It looks like you've passed the challenge then?

N

Niklas•5/3/24, 5:33 PM

I can send you the url if you're interested

IIsaac McFadyen It looks like you've passed the challenge then?

N

Niklas•5/3/24, 5:33 PM

yes I did, automaticly

I

Isaac McFadyen•5/3/24, 5:33 PM

Odd that your callback isn't getting the token then

I

Isaac McFadyen•5/3/24, 5:33 PM

I might leave this for people more experienced with Turnstile to help with, I don't have much Turnstile experience.

N

Niklas•5/3/24, 5:34 PM

Alright, but thank you very much for your help :)

N

Niklas•5/3/24, 5:34 PM

So, maybe here is someone else to help me?

(pls @ me)

Original message was deleted

N

Niklas•5/3/24, 5:37 PM

now its 'undefined'

N

Niklas•5/3/24, 5:37 PM

them twice

console.log('token:' + token.data);
console.log('token string:' + JSON.stringify(token.data));

console.log('token:' + token.data);
console.log('token string:' + JSON.stringify(token.data));

console.log('token:' + token.data);
console.log('token string:' + JSON.stringify(token.data));

console.log('token:' + token.data);
console.log('token string:' + JSON.stringify(token.data));

N

Niklas•5/3/24, 5:40 PM

Bruh thats it.. Thanks!

N

Niklas•5/3/24, 5:42 PM

token.detail.token

F

fobtac•5/3/24, 8:14 PM

^^following for a similar issue. i'm also using sveltekit. when i submit my form, i'm returning a 401 error. i've tried across multiple browsers without adblock, but haven't been able to get my form to submit like it does normally without the turnstile server side verification. any help would be much appreciated.

Ffobtac ^^following for a similar issue. i'm also using sveltekit. when i submit my form...

I

Isaac McFadyen•5/3/24, 10:09 PM

?PAT-401 you don't need to worry about the 401 error

(It reloaded itself rn thats now the current one: 87d6e6955edf5aeb-VIE)

Similar Threads