How to Use Cloudflare Turnstile: Protect Forms and Public APIs Without Classic CAPTCHA
Turnstile is Cloudflare's CAPTCHA alternative: the client widget generates a token, and the server must validate it with the Siteverify API. Tokens expire after 300 seconds and are single-use; a widget without server validation is incomplete.