First commit

handlers.go

@@ -34,7 +34,7 @@ func registerHandler(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	// Validate reCAPTCHA token
+	// Validate Turnstile token
 	valid, err := validateRecaptcha(req.Captcha)
 	if err != nil {
 		http.Error(w, fmt.Sprintf("CAPTCHA validation failed: %v", err), http.StatusInternalServerError)

recaptcha.go

@@ -8,36 +8,36 @@ import (
 	"os"
 )
 
-func validateRecaptcha(captchaToken string) (bool, error) {
+func validateRecaptcha(token string) (bool, error) {
-	secret := os.Getenv("CAPTCHA_SERVER_KEY")
+	secret := os.Getenv("TURNSTILE_SECRET_KEY")
 	if secret == "" {
-		return false, fmt.Errorf("CAPTCHA_SERVER_KEY is not set")
+		return false, fmt.Errorf("TURNSTILE_SECRET_KEY is not set")
 	}
 
-	url := "https://www.google.com/recaptcha/api/siteverify"
+	url := "https://challenges.cloudflare.com/turnstile/v0/siteverify"
 	payload := map[string]string{
 		"secret":   secret,
-		"response": captchaToken,
+		"response": token,
 	}
 	payloadBytes, _ := json.Marshal(payload)
 
 	resp, err := http.Post(url, "application/json", bytes.NewBuffer(payloadBytes))
 	if err != nil {
-		return false, fmt.Errorf("reCAPTCHA API request failed: %v", err)
+		return false, fmt.Errorf("Turnstile API request failed: %v", err)
 	}
 	defer resp.Body.Close()
 
 	var result map[string]interface{}
 	if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
-		return false, fmt.Errorf("failed to parse reCAPTCHA API response: %v", err)
+		return false, fmt.Errorf("Failed to parse Turnstile API response: %v", err)
 	}
 
 	success, ok := result["success"].(bool)
 	if !ok || !success {
 		if errors, exists := result["error-codes"]; exists {
-			fmt.Printf("reCAPTCHA error codes: %+v\n", errors)
+			return false, fmt.Errorf("Turnstile validation failed: %v", errors)
 		}
-		return false, fmt.Errorf("reCAPTCHA validation failed")
+		return false, fmt.Errorf("Turnstile validation failed")
 	}
 
 	return true, nil