PHPackages coderflex/laravel-turnstile - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. coderflex/laravel-turnstile ActiveLibrary[Security](/categories/security) coderflex/laravel-turnstile =========================== A package to help you implement the Cloudflare turnstile "CAPTCHA Alternative" 2.1.1(1y ago)110317.7k—7.5%11[4 PRs](https://github.com/coderflexx/laravel-turnstile/pulls)3MITPHPPHP ^8.2|^8.3CI passing Since May 28Pushed 4mo ago2 watchersCompare [ Source](https://github.com/coderflexx/laravel-turnstile)[ Packagist](https://packagist.org/packages/coderflex/laravel-turnstile)[ Docs](https://github.com/coderflexx/laravel-turnstile)[ RSS](/packages/coderflex-laravel-turnstile/feed)WikiDiscussions main Synced 1mo ago READMEChangelog (9)Dependencies (12)Versions (15)Used By (3) Laravel Turnstile ================= [](#laravel-turnstile) [![Latest Version on Packagist](https://camo.githubusercontent.com/7d923959b0855da463808dd1eddacafb9e4732cb9ed0398dfba8d5326b6f5208/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f636f646572666c65782f6c61726176656c2d7475726e7374696c652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/coderflexx/laravel-turnstile)[![GitHub Tests Action Status](https://camo.githubusercontent.com/8f9b6c8c8a54b67d60ee701620a2b848ae27a786d212d164b998eee31885eab2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f616374696f6e732f776f726b666c6f772f7374617475732f636f646572666c6578782f6c61726176656c2d7475726e7374696c652f72756e2d74657374732e796d6c3f6272616e63683d6d61696e266c6162656c3d7465737473267374796c653d666c61742d737175617265)](https://github.com/coderflexx/laravel-turnstile/actions?query=workflow%3Arun-tests+branch%3Amain)[![GitHub Code Style Action Status](https://camo.githubusercontent.com/a0fa3dba612b90e9b511ebe5437fd069df32402940294b64f8287761c31982c0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f616374696f6e732f776f726b666c6f772f7374617475732f636f646572666c6578782f6c61726176656c2d7475726e7374696c652f6669782d7068702d636f64652d7374796c652d6973737565732e796d6c3f6272616e63683d6d61696e266c6162656c3d636f64652532307374796c65267374796c653d666c61742d737175617265)](https://github.com/coderflexx/laravel-turnstile/actions?query=workflow%3A%22Fix+PHP+code+style+issues%22+branch%3Amain)[![Total Downloads](https://camo.githubusercontent.com/6c6099ef786430b9ca6c39f0ce08b9a8a217cb0c30481f109fe481a5c7d6ee82/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f636f646572666c65782f6c61726176656c2d7475726e7374696c652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/coderflex/laravel-turnstile) **Laravel Turnstile**, is a package to help you implement [cloudflare turnstile](https://developers.cloudflare.com/turnstile/) easily, and with no time. Installation ------------ [](#installation) You can install the package via composer: ``` composer require coderflex/laravel-turnstile ``` You can publish the config file with: ``` php artisan vendor:publish --tag="turnstile-config" ``` This is the contents of the published config file: ``` return [ /* |-------------------------------------------------------------------------- | Turnstile Keys |-------------------------------------------------------------------------- | | This value is the site, and the secret key of your application, after creating an application | with Cloudflare turnstile, copy the site key, and use it here, or in the .env | file. | Note that the secret key should not be publicly accessible. | | @see: https://developers.cloudflare.com/turnstile/get-started/#get-a-sitekey-and-secret-key | */ 'turnstile_site_key' => env('TURNSTILE_SITE_KEY', null), 'turnstile_secret_key' => env('TURNSTILE_SECRET_KEY', null), /* |-------------------------------------------------------------------------- | Error Messages |-------------------------------------------------------------------------- | | Here you can find the error messages for the application. You can modify | or translate the error message as you like. | | Note that you can translate the error message directly, without wrapping | them in translate helper. | */ 'error_messages' => [ 'turnstile_check_message' => 'The CAPTCHA thinks you are a robot! Please refresh and try again.', ], ]; ``` Optionally, you can publish the views using: ``` php artisan vendor:publish --tag="turnstile-views" ``` Turnstile Keys -------------- [](#turnstile-keys) To be able to use **Cloudflare Turnstile**, you need to get the `SiteKey`, and the `SecretKey` from your [Cloudflare dashboard](https://developers.cloudflare.com/turnstile/get-started/#get-a-sitekey-and-secret-key) After Generating the **keys**, use `TURNSTILE_SITE_KEY`, and `TURNSTILE_SECRET_KEY` in your `.env` file ``` TURNSTILE_SITE_KEY=2x00000000000000000000AB TURNSTILE_SECRET_KEY=2x0000000000000000000000000000000AA ``` If you want to test the widget, you can use the [Dummy site keys and secret keys](https://developers.cloudflare.com/turnstile/reference/testing/) that Cloudflare provides. Usage ----- [](#usage) ### Turnstile Widget Component [](#turnstile-widget-component) Once you require this package, you can use the turnstile widget in your form, like the following ``` ``` As you can see, the widget has few options to use. You can know more about them in the [configuration section](https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/#configurations) ### Turnstile Backend Validation [](#turnstile-backend-validation) Once you used the widget component, in the frontend. You can validate **Cloudflare** Response, by using the `validate` method. Here's an example: ``` use Coderflex\LaravelTurnstile\Facades\LaravelTurnstile; public function store(Request $request) { // maybe you want to validate your form first $response = LaravelTurnstile::validate(); if (! $response['success']) { // will return boolean // do your logic } } ``` You may, optionally, send the **Cloudflare** response with the validation method. Something like the following: ``` public function store(Request $request) { ... $response = LaravelTurnstile::validate( $request->get('cf-turnstile-response'); // this will be created from the cloudflare widget. ); ... } ``` ### Turnstile Custom Rule [](#turnstile-custom-rule) If you want clean validation, you can use the `TurnstileCheck` custom rule, along with your form validation. Here's an example: ``` use Coderflex\LaravelTurnstile\Rules\TurnstileCheck; public function store(Request $request) { $request->validate([ 'cf-turnstile-response' => [new TurnstileCheck()] ]); } ``` The custom rule, will use the same logic, as the **backend validation**, but instead will check for the response, and return a validation message, if the captcha fails. You can change the content of the validation message, in `config/turnstile.php` file ``` return [ ... 'error_messages' => [ 'turnstile_check_message' => 'The CAPTCHA thinks you are a robot! Please refresh and try again.', ], ]; ``` **PS**: If you want to translate the message, just copy the message and translate it, because it uses the translator method behind the scene. Real Life Example ----------------- [](#real-life-example) In your blade file ``` @csrf @error('name') {{ $message }} @enderror @error('cf-turnstile-response') {{ $message }} @enderror Submit ``` In your controller: ``` use Coderflex\LaravelTurnstile\Rules\TurnstileCheck; use Coderflex\LaravelTurnstile\Facades\LaravelTurnstile; ... public function store(Request $request) { $request->validate([ 'name' => ['required', 'string', 'max:250'], 'cf-turnstile-response' => ['required', new TurnstileCheck()], ]); // or $response = LaravelTurnstile::validate(); if (! $response['success']) { // do your thing. } // do your things. } ``` Testing ------- [](#testing) ``` composer test ``` Changelog --------- [](#changelog) Please see [CHANGELOG](CHANGELOG.md) for more information on what has changed recently. Contributing ------------ [](#contributing) Please see [CONTRIBUTING](CONTRIBUTING.md) for details. Security Vulnerabilities ------------------------ [](#security-vulnerabilities) Please review [our security policy](../../security/policy) on how to report security vulnerabilities. Credits ------- [](#credits) - [ousid](https://github.com/ousid) - [All Contributors](../../contributors) License ------- [](#license) The MIT License (MIT). Please see [the License File](LICENSE.md) for more information. ### Health Score 55 — FairBetter than 98% of packages Maintenance62 Regular maintenance activity Popularity52 Moderate usage in the ecosystem Community22 Small or concentrated contributor base Maturity67 Established project with proven stability Bus Factor1 Top contributor holds 79.5% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~64 days Recently: every ~157 days Total 11 Last Release 444d ago Major Versions v1.0.4 → v2.0.02023-06-11 PHP version history (3 changes)v1.0.0PHP ^8.1 v2.0.1PHP ^8.1|^8.2 2.1.1PHP ^8.2|^8.3 ### Community Maintainers ![](https://www.gravatar.com/avatar/fc6700ab1fdaa6344fb382fd2670393b22d15cd2aba3ab4964bc5235abf6e094?d=identicon)[ousid](/maintainers/ousid) --- Top Contributors [![ousid](https://avatars.githubusercontent.com/u/21012933?v=4)](https://github.com/ousid "ousid (35 commits)")[![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)](https://github.com/dependabot[bot] "dependabot[bot] (5 commits)")[![laravel-shift](https://avatars.githubusercontent.com/u/15991828?v=4)](https://github.com/laravel-shift "laravel-shift (2 commits)")[![faabiopontes](https://avatars.githubusercontent.com/u/2223935?v=4)](https://github.com/faabiopontes "faabiopontes (1 commits)")[![jeffersongoncalves](https://avatars.githubusercontent.com/u/411493?v=4)](https://github.com/jeffersongoncalves "jeffersongoncalves (1 commits)") --- Tags captchacloudflarelaravellaravel-turnstileturnstilelaravelcloudflarecoderflexturnstilelaravel-turnstile ### Code Quality TestsPest Code StyleLaravel Pint ### Embed Badge ![Health badge](/badges/coderflex-laravel-turnstile/health.svg) ``` [![Health](https://phpackages.com/badges/coderflex-laravel-turnstile/health.svg)](https://phpackages.com/packages/coderflex-laravel-turnstile) ``` ### Alternatives [spatie/laravel-health Monitor the health of a Laravel application 86910.0M83](/packages/spatie-laravel-health)[spatie/laravel-ciphersweet Use ciphersweet in your Laravel project 416718.4k1](/packages/spatie-laravel-ciphersweet)[coderflex/filament-turnstile Filament Plugin to help you implement Cloudflare Turnstile 30118.3k](/packages/coderflex-filament-turnstile)[vormkracht10/laravel-mails Laravel Mails can collect everything you might want to track about the mails that has been sent by your Laravel app. 24149.7k](/packages/vormkracht10-laravel-mails)[muhammadhuzaifa/telescope-guzzle-watcher Telescope Guzzle Watcher provide a custom watcher for intercepting http requests made via guzzlehttp/guzzle php library. The package uses the on\_stats request option for extracting the request/response data. The watcher intercept and log the request into the Laravel Telescope HTTP Client Watcher. 98239.8k1](/packages/muhammadhuzaifa-telescope-guzzle-watcher)[spatie/laravel-mailcoach-sdk An SDK to easily work with the Mailcoach API in Laravel apps 41290.2k1](/packages/spatie-laravel-mailcoach-sdk) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)