search

dotenv-org / cloudflare_turnstile

🥫 Spam protection for your Rails apps using Cloudflare Turnstile
MIT License
4 stars 2 forks source link

form tag helper uses ENV[] and doesn't check the initializer variable #1

Open inspire22 opened 1 year ago

inspire22 commented 1 year ago

Thanks for setting this up!

https://github.com/dotenv-org/cloudflare_turnstile/blob/master/lib/cloudflare_turnstile/view_helpers.rb

def site_key
  ENV["CLOUDFLARE_TURNSTILE_SITE_KEY"]
end

Which doesn't work if you set the sitekey in an initializer as it says is possible in the readme.

Also many folks use the same action for get & post, it might be nice to document the cloudflare_turnstile_verify method for calling directly if you don't want to use the before_action.

inspire22 commented 1 year ago

Also might reference https://developers.cloudflare.com/turnstile/reference/testing/ for the testing site keys since that's useful for any tests folks might want to do.