Turnstile

Get the Cloudflare Turnstile site key

get

https://app.neostore.cloudhttps://app-qa.neostore.cloud

/api/{tenantId}/admin/extensions/cloudflare/turnstile

Returns the public Turnstile site key configured for this tenant. Returns 404 when Turnstile is not configured. The secret key is not returned for security reasons.

Required scopes

This endpoint requires the following scopes:

Authorizations

admin-bearerapiKey

OAuth2implicitRequired

Authorization URL:

Path parameters

tenantIdstringRequired

Responses

200

Configuration returned.

text/plainapplication/jsontext/json

Response body for Turnstile configuration.

siteKeystring · min: 1Required

Public site key configured for this tenant.

proofCookieValidityDurationSecondsinteger · int32Optional

Duration in seconds the proof cookie remains valid. 0 means disabled.

401

Caller not authenticated.

text/plainapplication/jsontext/json

403

Caller lacks required scope.

text/plainapplication/jsontext/json

404

Turnstile is not configured for this tenant.

text/plainapplication/jsontext/json

get/api/{tenantId}/admin/extensions/cloudflare/turnstile

HTTPcURLJavaScriptPython

GET /api/{tenantId}/admin/extensions/cloudflare/turnstile HTTP/1.1
Host: app.neostore.cloud
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

{
  "siteKey": "text",
  "proofCookieValidityDurationSeconds": 1
}

Set Cloudflare Turnstile configuration

put

https://app.neostore.cloudhttps://app-qa.neostore.cloud

/api/{tenantId}/admin/extensions/cloudflare/turnstile

Saves the Turnstile site key to server/cloudflare.yml. Omit secretKey to update the site key without rotating the secret.

Required scopes

This endpoint requires the following scopes:

Authorizations

admin-bearerapiKey

OAuth2implicitRequired

Authorization URL:

Path parameters

tenantIdstringRequired

Body

application/jsontext/jsonapplication/*+json

Request body for setting Turnstile configuration.

siteKeystring · min: 1Required

Public site key used by the web client to render the Turnstile widget.

secretKeystring · nullableOptional

Secret key used by the server to verify Turnstile tokens. Stored in the secret repository under CLOUDFLARE-TURNSTILE-SECRETKEY. When omitted, the existing secret is preserved.

proofCookieValidityDurationSecondsinteger · int32Required

Duration in seconds the proof cookie remains valid after a successful challenge. Set to 0 to disable the proof cookie bypass.

Responses

204

Configuration saved.

No content

400

Request body is invalid.

text/plainapplication/jsontext/json

401

Caller not authenticated.

text/plainapplication/jsontext/json

403

Caller lacks required scope.

text/plainapplication/jsontext/json

put/api/{tenantId}/admin/extensions/cloudflare/turnstile

HTTPcURLJavaScriptPython

PUT /api/{tenantId}/admin/extensions/cloudflare/turnstile HTTP/1.1
Host: app.neostore.cloud
Authorization: Bearer YOUR_OAUTH2_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 74

{
  "siteKey": "text",
  "secretKey": null,
  "proofCookieValidityDurationSeconds": 1
}

application/jsontext/jsonapplication/*+json

No content

Delete Cloudflare Turnstile configuration

delete

https://app.neostore.cloudhttps://app-qa.neostore.cloud

/api/{tenantId}/admin/extensions/cloudflare/turnstile

Removes server/cloudflare.yml from tenant configuration. This disables Turnstile for the tenant. Also removes the Turnstile secret when present.

Required scopes

This endpoint requires the following scopes:

Authorizations

admin-bearerapiKey

OAuth2implicitRequired

Authorization URL:

Path parameters

tenantIdstringRequired

Responses

204

Configuration deleted.

No content

401

Caller not authenticated.

text/plainapplication/jsontext/json

403

Caller lacks required scope.

text/plainapplication/jsontext/json

delete/api/{tenantId}/admin/extensions/cloudflare/turnstile

HTTPcURLJavaScriptPython

DELETE /api/{tenantId}/admin/extensions/cloudflare/turnstile HTTP/1.1
Host: app.neostore.cloud
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

No content