WIP: Turnstile: Validation failed [timeout-or-duplicate]

Browser: Firefox Dev 147.0b9
OS: macOS
URL: Local
Video: https://youtu.be/smAfsWCkOEQ

Hello,

I have a registration and login form, both created natively in Bricks. Both forms utilise Cloudflare Turnstile.

Scenario

  • A user completes the fields on the registration form and clicks the “Submit” button.
  • The form successfully validates and states that an account with the same email address already exists.
  • The user updates the email address field
  • The user clicks “Submit” again.
  • The user sees an error message, “Turnstile: Validation failed [timeout-or-duplicate]”

To the average user, this error means nothing and doesn’t help them.

On the registration form, a user will get this issue if:

  • Password and confirm password fields don’t match, they’ll get this issue
  • Enter a username that already exists, they’ll get this issue
  • Enters an email address that already exists, they’ll get this issue

On a login form, a user will get this issue if:

  • Username or email doesn’t exist
  • Password is incorrect

As soon as the user updates the form fields based on the validation message and tries to resubmit, they get this message.

In this video: https://youtu.be/Dhm1NpGQceg, I accidentally tried to log in with details that don’t exist. The validation messages successfully reminded me, and the second time, I logged in with a username and password that exists - or tried to, at least.

I am not sure if I have misconfigured something, or if this is a bug or a potential improvement, so I apologise if this isn’t posted in the right place.

Login form actions:

Login form Turnstile:

Registration form actions:

Registration form Turnstile:

Thanks in advance

Hi @AaronChaos,

thank you for the detailed report. Is there a chance that you copy-paste the registration & login form here, so I can test on your exact example?

Thank you,
Matej

Hi @Matej,

From memory, it was just a default login from Brixies: Login page 1 - Brixies .

You may notice I added a confirm password field (which would be a good feature request), but it can be removed for testing purposes, since it relies on an additional PHP script I created for validation.

I believe you can recreate the issue with any login form using Turnstile. Just enter the wrong information to log in, press submit, then enter the correct information, and press submit again

Thanks

Hi @AaronChaos,

thank you so much for this. I was able to replicate the issue, and I’ve added it to our internal bug tracker.

We will update this topic once we release a fix.

Thank you,
Matej

1 Like