Allow localhost or 127.0.0.1 as acceptable domains for Turnstile

Using 127.0.0.1 as a domain results in a 401 status code from challenges.cloudflare.com. Allow for local development as Google reCAPTCHA does.

We return a 401 status as part of the PAT (Private Access Token) challenge, on .../pat/... URLs.

Using Turnstile locally seems to be working on our end, if you allow the domains you are using (127.0.0.1 or localhost). Could you please share more information regarding the errors you observe?

You’re correct, 127.0.0.1 as a domain works as expected.

It’s the 401 network error that threw me for a loop. I understand this is expected behavior as your probing for PAT availability. Not ideal behavior I guess, but a worthy trade off.

Related topic: Turnstile returns 401 for challenges.cloudflare.com

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.