S

Supabase•7mo ago

seno

Supabase and cloudflare turnstile

In cloudflare turnstile, I create a new Turnstile Widget and I use that secret in Bot and Abuse Protection -> captcha secret (check image) section.

Then I make a call which looks like this:

curl -X POST 'YOUR_SUPABASE_URL/auth/v1/signup' \ -H "apikey: YOUR_SUPABASE_ANON_KEY" \ -H "Content-Type: application/json" \ -d '{ "email": "test-user@example.com", "password": "a-very-secure-password", "options": { "captcha_token": "A_REAL_CAPTCHA_TOKEN_GOES_HERE" } }'curl -X POST 'YOUR_SUPABASE_URL/auth/v1/signup' \ -H "apikey: YOUR_SUPABASE_ANON_KEY" \ -H "Content-Type: application/json" \ -d '{ "email": "test-user@example.com", "password": "a-very-secure-password", "options": { "captcha_token": "A_REAL_CAPTCHA_TOKEN_GOES_HERE" } }'

However I get this error:
{ "code": 500, "error_code": "unexpected_failure", "msg": "captcha verification process failed", "error_id": "94f29d84d785f278-IAD" }{ "code": 500, "error_code": "unexpected_failure", "msg": "captcha verification process failed", "error_id": "94f29d84d785f278-IAD" }

I am pretty sure that site key and everything is set up properly, and the body is being sent correctly. any idea why this happens?


{
"event_message": "{"component":"api","error":"no captcha response (captcha_token) found in request","level":"error","method":"POST","msg":"500: captcha verification process failed","path":"/signup","referer":"https://test.com/email-confirmation\",\"remote_addr\":\"54.86.50.139\",\"request_id\":\"94f29d84d785f278-IAD\",\"time\":\"2025-06-13T15:28:01Z\"}",
"id": "4c6ce8cf-5dfa-484b-aa61-d30fbabfff24",
"metadata": [
{
"host": "db-fbgdnqarkatcecjckioc",
"component": "api",
"_SYSTEMD_CGROUP": null,
"grant_type": null,
"request_id": "94f29d84d785f278-IAD",
"mail_from": null,
"msg": "500: captcha verification process failed",
"level": "error",
"_PID": null,
"path": "/signup",
"method": "POST",
"CODE_FILE": null,
"remote_addr": "54.86.50.139",
"error": "no captcha response (captcha_token) found in request",
"client_id": null,
"MESSAGE_ID": null,
"url": null,
"referer": "https://test.com/email-confirmation",
}
],
"timestamp": 1749828481000000
}