turnstile.server.ts RawHistoryFolder

1import { TURNSTILE_SECRET_KEY } from '$env/static/private';
2import { createLogger } from './logger.server';
3
4const log = createLogger('turnstile');
5
6interface TurnstileVerifyResponse {
7    "success": boolean;
8    "error-codes"?: string[];
9    "challenge_ts"?: string;
10    "hostname"?: string;
11    "action"?: string;
12    "cdata"?: string;
13}
14
15export async function validateTurnstileToken(token: string, remoteip?: string): Promise<boolean> {
16    try {
17        const formData = new FormData();
18        formData.append('secret', TURNSTILE_SECRET_KEY);
19        formData.append('response', token);
20        if (remoteip) {
21            formData.append('remoteip', remoteip);
22        }
23
24        const url = 'https://challenges.cloudflare.com/turnstile/v0/siteverify';
25        const result = await fetch(url, {
26            body: formData,
27            method: 'POST',
28        });
29
30        const outcome: TurnstileVerifyResponse = await result.json();
31        
32        if (!outcome.success) {
33            log.warn('Turnstile validation failed', {
34                errors: outcome["error-codes"],
35                remoteip: remoteip ? `${remoteip.split('.')[0]}.xxx.xxx.xxx` : undefined
36            });
37        }
38        
39        return outcome.success;
40    } catch (error) {
41        log.error('Error validating Turnstile token', { error });
42        return false;
43    }
44}