Cloudflare Turnstile Full-Lifecycle PoC

1. Client-Side Challenge & Protected Action

Configure scenario, solve the Turnstile challenge, and verify the token at the Cloudflare Edge.

Sitekey: 0x4AAAAAAF4pm9TlFoVxW-HW

Verification Scenario

Backend Siteverify Endpoint

Action Tag (data-action)

Widget Theme

Real-time visibility into token generation, edge verification, and single-use enforcement.

Edge Latency: —

Step 1

Widget Mounted

Step 2

Token Issued

Step 3

Edge siteverify

Step 4

Receipt Granted

Current Client Token (cf-turnstile-response — Single-Use, 5-Min TTL)

No token generated yet.

Latest Cloudflare Worker POST /siteverify Response

// Submit the form after solving the widget to inspect the live Cloudflare siteverify payload.

Multi-Platform Architecture Matrix

Subfolder	Platform	Integration Pattern
`/web`	Web Frontend	Explicit JS API + CSP + Replay Simulator
`/backend`	Cloudflare Worker	`POST /siteverify` + Hostname Guard + Receipts
`/ios`	Native iOS (SwiftUI)	`WKWebView` + `WKScriptMessageHandler` + Apple PAT
`/android`	Native Android (Kotlin)	`WebView` + `@JavascriptInterface` + DOM Storage