Blomstra Turnstile

IanM

Turnstile

A Flarum extension. Implement Cloudflare Turnstile into your Flarum forum.

Turnstile is a CAPTCHA alternative that is privacy-focused. As of writing, Turnstile is in beta, and free to all Cloudflare customers on any plan.

To configure this extension, you'll need to generate Turnstile keys on your Cloudflare account, and input these on the admin dashboard.

Features

At present, only the Signup modal is protected, further options may be added in the future.

Installation

Install with composer:

composer require blomstra/turnstile:"*"

Updating

composer update blomstra/turnstile
php flarum migrate
php flarum cache:clear

Links

tolgaaaltas

Turnstile (IanM) can fix that but I'm not sure you can use it with FreeFlarum.

essesoul

Wow, I've been looking forward to this plugin for a long time, can't wait to try it out

VidhunNagarajan

Thanks!

User39

Could you add the option to protect the "sign in" as well?

luceos

User39 we would gladly accept such a feature with a setting toggle. But this would either need to be commissioned or contributed as a PR to the original repository. Our availability is a bit limited right now.

Lurker

User39 Could you add the option to protect the "sign in" as well?

Thanks for bringing this up. I’d also like to see this feature implemented if possible. 👍🏼

luceos But this would either need to be commissioned or contributed as a PR to the original repository.

If commissioning this seems out of reach for now, would enabling a bounty suffice for this proposal? 🙂

luceos

Lurker If commissioning this seems out of reach for now, would enabling a bounty suffice for this proposal?

Yes, that's possible. Feel free to create a Proposal, I can review and enable bounties for that once that's been published.

IanM

0.1.1

As requested in Proposals this feature release includes:

✨

Turnstile protection on Login and Forgot Password modals.
Admin settings to select which supported action will have turnstile protection enabled.
Dark mode support for visible turnstile captcha modes.

This does not have any effect on logins made via providers (ie fof/oauth), this is for direct Flarum logins only at this stage

Screenshots

Updating

composer update blomstra/turnstile
php flarum cache:clear

[deleted]

IanM
I am not sure that I can express how much I and probably all other members do appreciate this.

GreXXL

IanM awesome job, thanks!

[deleted] to show the appreciation you can still support the bounty if that is an option 😉

User39

IanM thank you so much!

[deleted]

GreXXL something is wrong

sylv38

THIS IS FANTASTIC !!!! Thank you so much for this essential and very convenient extension !

Lurker

The bounty for this proposal is still open for anyone to contribute. Thanks! 😊

KarlReza1

Hope it gets updated to include it even for new posts/replies!!!! Would gladly contribute a few bucks if someone puts up a bounty for it! Turnstile reduces spam a looot

luceos

KarlReza1 make sure there's no Proposal yet and create one. I'll gladly mark it available for bounties should the requested features are transparent.

MikeJones

Just installed and am excited to see if this is better than captcha for stopping spam on my website 🤞

While testing, I think I found a bug. If you type in a password that is less than 8 characters, you get the normal flarum warning that its not long enough. If this happens, the turnstyle despite saying you are good will always fail and then ask you to refresh the page.

KarlReza1

MikeJones I think the extension is designed in such a way that whenever submit is clicked, if there is any failure u gotta refresh to solve captcha successfully

FullThrottle83

This is a great extension!

However, I have a second Flarum install, where upon user registration I get
"The turnstile field is required."

The field is visible, and I've tried regenerating secret key.
Also, have cleared cache.

Any suggestions?

Edit: if I disable FoF Real Time Login it works again.

Umutcan

Hello,
There is a new feature in the management area with version 1.8. Ability to add members from the admin panel.

I have a site that uses Turnstile, Turnstile does not appear in the field that comes with the new feature. For this reason, we cannot create users from the administration panel. @IanM @luceos

IanM

0.1.3

fix an issue in Flarum 1.8 where admins were unable to create new users directly from the admin panel due to the Turnstile token requirement Umutcan