Skip to content
BlazorSaas Documentation

Cloudflare Turnstile

Cloudflare Turnstile protects BlazorSaas from spam and bots with a seamless CAPTCHA alternative. It verifies users without puzzles, enhancing security and experience.

Why We Use It

BlazorSaas adopts Turnstile to block automated spam and bot attacks effectively. Its non-intrusive challenges maintain user flow while leveraging Cloudflare’s bot detection. This balances security with usability across forms and APIs.

How We Use It

Users configure Turnstile by providing a public site key for the web interface and a private secret key for API validation.

The UseTurnstileProtection attribute and TurnstileMiddleware pair validate Turnstile tokens on GraphQL mutations requiring protection.

It integrates into forms and APIs to ensure only verified humans proceed.

How It Scales

Turnstile scales with Cloudflare’s global network, handling increased traffic and sophisticated bots as your app grows. Higher-tier plans offer enhanced analytics and customization for larger deployments. It adapts to rising submission volumes effortlessly.

Resources