turnstile

package

v0.0.7-alpha Latest Latest Go to latest Published: Aug 13, 2026 License: AGPL-3.0 Imports: 9 Imported by: 0

Details

Package turnstile verifies Cloudflare Turnstile challenge tokens.

View Source

const (
	CanonicalSiteverifyEndpoint = "https://challenges.cloudflare.com/turnstile/v0/siteverify"
)

This section is empty.

This section is empty.

type ClientSpec struct {
	Secret           string
	ExpectedHostname string
	ExpectedAction   string
	Timeout          time.Duration
}

ClientSpec contains the secret verification settings that are never exposed through the public application configuration endpoint.

type Verifier interface {
	Verify(context.Context, string, netip.Addr) error
}

Verifier verifies one Turnstile token for a client IP address.

func NewClient(spec ClientSpec) (Verifier, error)

NewClient constructs a verifier that always uses Cloudflare's canonical siteverify endpoint.