Persilsoft.Turnstile.Server 1.0.4

Persilsoft.Turnstile.Server

Persilsoft.Turnstile.Server is a backend library that provides a ready-to-use service to verify CAPTCHA tokens using Cloudflare Turnstile.
It eliminates the need to manually call the siteverify endpoint — you just call a method from the injected service.

🚀 Installation

1. Install the NuGet package:

dotnet add package Persilsoft.Turnstile.Server

2. Register the Turnstile services in your backend:

using Persilsoft.Turnstile.Server.Options;
using Persilsoft.Turnstile.Server;

Action<TurnstileOptions> turnstileOptionsConfigurator = options =>
    builder.Configuration.GetRequiredSection(TurnstileOptions.SectionKey).Bind(options);

builder.Services.AddTurnstileServices(turnstileOptionsConfigurator);

🔧 Configuration

Add the following section to your appsettings.json:

"TurnstileOptions": {
  "VerifyEndpoint": "https://challenges.cloudflare.com/turnstile/v0/siteverify",
  "SecretKey": "YOUR_SECRET_KEY"
}

✅ Example Usage

You can inject the TurnstileService into any endpoint or controller to validate the CAPTCHA token sent from your frontend:

Example Minimal API Endpoint

namespace Persilsoft.Turnstile.Server.Tests.Endpoints;

internal static class DemoEndpoints
{
    public static WebApplication UseDemoEndpoints(this WebApplication app)
    {
        app
            .MapPost("send", Send)
            .Produces(StatusCodes.Status200OK)
            .Produces(StatusCodes.Status500InternalServerError)
            .WithTags("Turnstile")
            .WithName(nameof(Send))
            .WithSummary("Send demo data")
            .WithDescription("Receives demo data along with a Turnstile token and validates it using Cloudflare SiteVerify.");

        return app;
    }

    private static async Task<IResult> Send(DemoModel dto, TurnstileService service)
    {
        var isValid = await service.VerifyAsync(dto.CaptchaToken);
        if (!isValid)
        {
            throw new BadHttpRequestException($"Token verification failed.");
        }

        Console.WriteLine("Save data to the database...");

        return TypedResults.Ok();
    }
}

Example DTO

public class DemoModel
{
    public string Name { get; set; } = string.Empty;
    public string CaptchaToken { get; set; } = string.Empty;
}

📜 License

MIT License

✨ Credits

Developed by Persilsoft.
Secure and simplify CAPTCHA verification on the server.