No token at all
The client submits with the token stripped, as a scripted client would. The server refuses before it ever calls siteverify.
Expected HTTP 400 · missing-token
Result
Submit the form to run this case.
Cloudflare Turnstile · phone validation · rate limits
The client submits with the token stripped, as a scripted client would. The server refuses before it ever calls siteverify.
Submit the form to run this case.