Turnstile API throwing invalid-input-response error code

What is the name of the domain?

What is the error number?

invalid-input-response

What is the error message?

invalid-input-response

What is the issue you’re encountering

Turnstile API throwing invalid-input-response error code

What steps have you taken to resolve the issue?

We have checked everything based on the turnstile documentation but the issue still persists. For invalid-input-response, the following description has been written:
invalid-input-response: The response parameter (token) is invalid or has expired. Most of the time, this means a fake token has been used. If the error persists, contact customer support.
We have verified and the token is neither invalid nor expired.

Screenshot of the error

Are you still encountering this?

I’m receiving the same issue as well. No matter what is passed to the verfiy endpoint, it returns a invalid-input-response.

A day after posting, the issue got resolved on it’s own but it has started happening today yet again.

That sounds like this post, where the user was able to fix it:

2 Likes

What is the name of the domain?

What is the error message?

invalid-input-response

What is the issue you’re encountering

our application uses turnstile to validate users upon login. today, we have had an uptick of users reporting prolbems logging in. upon further investigation, we are seeing that for each of these failures 1) we receive “invalid-input-response” from turnstile AND 2) the request always has multiple IP addresses in the x-forwarded-for http header. The reports from users started today but we can see these errors in our logs for the past few days. but today is definetly a far higher rate of these errors then any other day. we have not made any changes with our infrastructure or web app code. I have checked cloudflarestatus.com and don’t see anything posted there that might be relevant. Is anyone else experiencing this? or are these just valid messages from cloudflare from bots?

What steps have you taken to resolve the issue?

checked cloudflarestatus.com for any issues - none relevant.

What are the steps to reproduce the issue?

can’t reproduce but we can see evidence in our logs. it only happens when there are multiple ip addresses in x-forwarded-for http header

This solved my issue regarding “token validated” form submissions in the backend :+1:

Occured about 14 hours ago, now resolved. Thanks for sharing guys :raised_hands:

1 Like
1 Like