Issue with Cloudflare Turnstile causing 401 errors

[martynapieturakdp]

What is the name of the domain?

studiokreatywnychstron.pl

What is the error number?

401

What is the error message?

Request for the Private Access Token challenge. The next request for the Private Access Token challenge may return a 401 and show a warning in console. Failed to load resource: the server responded with a status of 401 ()

What is the issue you’re encountering

I am encountering an issue with Cloudflare Turnstile on my website. After integrating Turnstile with a form on my site, I consistently receive the following errors in the browser console: “Request for the Private Access Token challenge.” “The next request for the Private Access Token challenge may return a 401 and show a warning in console.” “Failed to load resource: the server responded with a status of 401 ()” Despite the successful generation of a token and its verification, these errors continue to appear. I have tried various configurations and troubleshooting steps, but the issue persists. I would greatly appreciate any guidance or suggestions on resolving this problem.

What steps have you taken to resolve the issue?

1. Created a firewall rule in Cloudflare to skip:
   URI Path contains cdn-cgi/challenge-platform
   Action: Skip (selected all available components to skip, including all managed rules and Browser Integrity Check).
2. Added exceptions in LiteSpeed Cache:
   Excluded Turnstile-related URLs from caching.
   Disabled caching on pages with forms.
3. Checked token verification on the server-side, which works correctly and returns a response with success: 1.
4. Verified that Turnstile is embedded via HTML code within Elementor Pro forms.

What are the steps to reproduce the issue?

1. Visit the website https://studiokreatywnychstron.pl/ and open the browser console (F12).
2. Navigate to a page containing a form protected by Turnstile.
3. Observe the console output for errors related to Turnstile, specifically:

• “Request for the Private Access Token challenge.”
• “The next request for the Private Access Token challenge may return a 401 and show a warning in console.”
• “Failed to load resource: the server responded with a status of 401 ()”

4. Submit the form and check the response for token verification and additional console messages.

Screenshot of the error

[mdemoura]

The HTTP 401 status code for that request is expected and not an issue, see: FAQ · Cloudflare Turnstile docs

[martynapieturakdp]

Thank you for fast answer. I have 2 more questions:
Question 1:
If I have three forms protected by Cloudflare Turnstile on a single webpage, is it expected behavior that the browser console shows the message “Request for the private access token challenge” three times (each accompanied by the expected HTTP 401 errors)?

Question 2 (see attached screenshot):
In my browser console, I see some entries that appear to be obfuscated JavaScript (font-size:0;color:transparent). Is this normal behavior associated with Cloudflare Turnstile, or should I investigate this further?

[mdemoura]

Question 1:

It’ll be printed every time said request is made, which is once per widget execution.

Question 2:

That’s expected, you can ignore it.