Is there a way to make Turnstile work from a desktop app? I tried registering the app's URL schema i

Is there a way to make Turnstile work from a desktop app? I tried registering the app's URL schema in the domain settings (say it's

app.electron://

app.electron://

, so I added

app.electron

app.electron

), but still get the

Invalid domain

Invalid domain

error when the app is packaged.

My Supabase Auth requires Turnstile captcha token to be passed in, so can't really skip that in the desktop app login.

IIgor Is there a way to make Turnstile work from a desktop app? I tried registering th...

frederik•6/11/24, 5:04 AM

I'm not sure but maybe login in a spawned browser window?

Jacobify•6/13/24, 11:08 AM

Hi everyone ,
I have an issue with turnstile . I have made an issue in the community website : https://community.cloudflare.com/t/cannot-initialize-widget-element-not-found/666742
Is it possible to get more help ?

Thanks in advance

Original message was deleted

Jacobify•6/13/24, 11:27 AM

can I ask why ? :bibicat:

Silent•6/13/24, 12:00 PM

Is it possible to get a sitekey without having a registered website (in the websites section) on cf?

Jacobify•6/13/24, 12:46 PM

Thanks @Leo , fixed my issue using

slots

slots

coolio2244242•6/15/24, 8:39 PM

I built a turnstile in a dev environemnt but I had the key hardcoded in the HTML. is the best practice to define the keys by environment in the wrangler.toml file?

coolio2244242•6/15/24, 9:00 PM

but how would I flip it per environment?

coolio2244242•6/15/24, 9:03 PM

yeah but I have a sitekey for dev and a sitekey for prod. Somehow I'd need to identify the environment to populate the turnstile element with the relevant sitekey. Tryign to think of how

coolio2244242•6/17/24, 5:29 PM

ok I found

NEXT_PUBLIC_

NEXT_PUBLIC_

should work but is this a best practice for turnstiles? I can't find any documentation on nit

coolio2244242•6/17/24, 5:41 PM

well the sitekey needs to align with the domain, no? so if I have a preview and prod environment (prod would be a custom domain in this case) I would need different sitekeys for both

coolio2244242•6/17/24, 5:42 PM

if I hardcode my preview sitekey in the turnstile, my prod turnstile won't work (I get this error)

coolio2244242•6/17/24, 5:43 PM

Ccoolio2244242 well the sitekey needs to align with the domain, no? so if I have a preview and ...

Erisa•6/17/24, 11:02 PM

You can add multiple domains, and if you add a domain then all subdomains are included automatically.
So for a Pages project for example just add

example.com

example.com

and

example.pages.dev

example.pages.dev

and youre good to go with one sitekey

coolio2244242•6/18/24, 1:33 AM

ahhh didn't know that, thank you!

Burak ER•6/18/24, 1:02 PM

Hello I have a problem with the turnstile. It works like a charm on desktop version of my website but when I change the view to mobile by developer options on the browser, it never completes. What could be the problem. On either version the turnstile script and turnstile div is loaded with same.

Leyton•6/18/24, 5:29 PM

@Burak ER I have a custom mobile view(s) with the right dimensions, but not overriding the User Agent - then Turnstile works in mobile mode in dev tools.

Jjawbr8ker I am trying to better under the use of "idempotency_key" mentioned: https://deve...

Hello, I’m Allie!•6/18/24, 8:37 PM

No. Basically, it allows you to send the /siteverify/siteverify request multiple times, as long as the same idempotency_keyidempotency_key is provided. I would probably place it as part of the form the user submits, so every submission includes the generated key

Jjawbr8ker bear with me, User goes to form -> Turnstile is presented, I generate key `idemp...

Hello, I’m Allie!•6/18/24, 8:49 PM

I would go:

User requests form
Form is returned with the idempotency_keyidempotency_key pre-set by the backend
User submits form
Site Verify with idempotency_keyidempotency_key from form returns sucess
Later...
Site Verify same form with changed data, but same Turnstile token and idempotency_keyidempotency_key returns sucess

HHello, I’m Allie!I would go: 1. User requests form 2. Form is returned with the `idempotency_key...

Victor•6/19/24, 3:52 PM

Continuing this train of thought, when would it make sense to have a new idempotency_keyidempotency_key? Different form on the same page? Different form on a different page? Or a whole new user session?

VVictor Continuing this train of thought, when would it make sense to have a new `idempo...

Hello, I’m Allie!•6/19/24, 8:37 PM

Ok so this is how I understand it. I am not on the #

turnstile, so take what I say with a grain of salt.

The idempotency_keyidempotency_key is there for when submission of the form/action can fail, even if the Turnstile check succeeds. For example, say you have a form with the following fields:

Name
Email Address
Profile Picture
Turnstile Check
The Name and Email are saved to a database, but the PfP is uploaded to object storage. You experience that the PUT to object storage fails intermittently, so you want to be able to retry the upload by resubmitting the form.

You have a problem though. By default, you would have to have the user redo the Turnstile check for every retry, which could be a pain if the error is not the users fault. If you add an idempotency_keyidempotency_key to the form(in a hidden field), that persists on retry, then once the Turnstile Check is completed once, it can be reused(without failing) when a submission is retried

Hello, I’m Allie!•6/19/24, 8:47 PM

Should be done now

Original message was deleted

Hello, I’m Allie!•6/19/24, 9:02 PM

Yeah, I was just highlighting why you might want to retry a request

HHello, I’m Allie!Ok so this is how I understand it. I am not on the #🤖turnstile, so take what I ...

Victor•6/19/24, 11:46 PM

The reason I was asking was for a chat situation where people send message, where turnstile (in invisible mode) is inside the <form><form> (that contains text box + content + submit button), each submit is technically a POST form submit, but SPA intercepted and processed (accordingly). Should each message submit contain a new turnstile challenge (as it is currently), or keep it the same challenge with the same idempotency_keyidempotency_key (as a sort of per active session key or challenge expires - whichever comes first)?

terrox•6/20/24, 6:36 AM

Is there a way maybe using API to get a list of URLs deleted from a turnstile widget id? Somehow a bunch got deleted when I added another and I don't know what they were. This is for multiple URLs in the one widget

VVictor The reason I was asking was for a chat situation where people send message, wher...

Hello, I’m Allie!•6/20/24, 7:05 AM

I would probably do like the WAF instead, present Turnstile once, then on subsequent requests have it completely disabled by serving a cookie

Original message was deleted

terrox•6/20/24, 7:16 AM

Might be a plan. Hopefully it's got some details or maybe I can go backwards to see what was added in the past

Erisa•6/20/24, 10:15 AM

Also please dont crosspost across channels general-discussions

Burak ER•6/20/24, 11:06 AM

I have a problem that I could not overcome. I have a checkout page where people login and register accordingly. I have the script which removes the elements including the turnstile widget from login div by clicking a radio button named "register". The same script reloads login div with the initial content including turnstile widget once the "login" radio button clicked. My problem is that when it inserts the elements turnstile widget is not re-initalized. How can I re-initialize the turnstile in this situation? I know it is better to hide the content of login instead of removing the elements when register radio is pressed but it is not the way how the script works and I could not be able to edit the script since it is minified.

Burak ER•6/20/24, 11:20 AM

thank you. now I recieve Uncaught TurnstileError: [Cloudflare Turnstile] Invalid type for "container", expected "selector" or an implementation of "HTMLElement", got "#cf-turnstile" .error when I tried to render the widget on a div with the id "cf-turnstile"

Burak ER•6/20/24, 11:24 AM

It is already there.

Burak ER•6/20/24, 11:30 AM

with page onload callback it works. but with the turnstile.ready it gives the error.

Burak ER•6/20/24, 11:31 AM

sorry window.onloadTurnstileCallback works

similardisaster•6/21/24, 1:03 PM

are there additional logs and/or analytics for Turnstile besides the one analytics dashboard showing Solve Rate, Widget Traffic, and Top Actions?

similardisaster•6/21/24, 1:05 PM

I am seeing a Visitor Solve Rate of 85% and I'm trying to figure out how to triage this. Based on the group we rolled out to I would expect to see 100% solve rate.

similardisaster•6/21/24, 1:08 PM

yea, I'm not convinced anyone is actually failing the challenge in the real sense - but before we move forward I need to at least be able to explain the number

Original message was deleted

similardisaster•6/21/24, 1:09 PM

gotcha, thanks, that's what I figured - there would be no indications on the server-side of a failed challenge right? was hoping I could check some request logs

similardisaster•6/21/24, 1:10 PM

thanks, Leo - really appreciate it. Makes sense to measure errors vs. non-completes seperatley

Akanksha Nichrelay•6/21/24, 8:24 PM

Hi! I am setting up Turnstile for the first time. I am curious how is Turnstile token generated? Are they unique in for an IP / time window or can over time two different requests have the same token?

Original message was deleted

Akanksha Nichrelay•6/21/24, 8:27 PM

Cool! So can I use these tokens to identify each request uniquely? I have an endpoint which is called after Turnstile token verification, can I use the Turnstile token to issue a JWT token?

Is there a way to make Turnstile work from a desktop app? I tried registering the app's URL schema i

Similar Threads

Similar Threads

Similar Threads