Skip to main content

Function: verifyTurnstile()

verifyTurnstile(secret, token, remoteIp?): Promise<boolean>

Defined in: src/server/services/turnstile.ts:10

Verify a Cloudflare Turnstile token server-side. Returns true when the token is valid (or when no secret is configured — callers treat that as "Turnstile disabled" and fall back to the honeypot). Fails closed on a configured secret: a missing/invalid token or a network error → false.

Parameters

secret

string | undefined

token

string | undefined

remoteIp?

string | null

Returns

Promise<boolean>