I keep receiving "invalid-input-response" when doing server side validation

What is the name of the domain?

app.fimsta.com

What is the error message?

“invalid-input-response”

What is the issue you’re encountering

Users cannot log in to the website. We keep getting “Captcha Verification Failed” message, even though the Cloudflare turnstile shows “Success!”

What steps have you taken to resolve the issue?

My developer was able to retrieve more detail on the error. It says:
“Verification failed on both attempts. Error codes: invalid-input-response”
and according to the turnstile doc, it means:
The response parameter (token) is invalid or has expired. Most of the time, this means a fake token has been used. If the error persists, contact customer support.

What are the steps to reproduce the issue?

Try and sign up or log in to app.fimsta.com

Screenshot of the error

Hi @fredgreene, is this a recent issue? Are you using the correct secret key when calling the siteverify API?

Thank you, yes we checked again today and the keys are correct. This has been working for months and has just stopped working yesterday. No clue why.

So it seems we might have found, an error on our end probably, something to do with environment not using the production environment keys but using dev.
Something like that, I’m not technical enough but at least we have a lead.

Well it’s still not working. The turnstile has this tendency to work with everyone once only, as as soon as you log out, it won’t let you back in.
Still displaying that same strange message every time: “Success!” but “Verification Captcha Failed”.
I had chosen that solution because it was the simplest out of the box “universal” solution, but we seem to have been running into a lot of issues. It’s probably not compatible with a lot of people’s browsers or cookie settings.

Have a look at your error messages, you’re calling siteverify twice for every token, so naturally the second time, the token is invalid.

Thank you. It seems that the problem was coming from here

Trying to see if the issue on your side has been fixed or not yet.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.