server.js

const express = require('express');
const nodeFetch = require('node-fetch');
const path = require('path');
const app = express();

app.use(express.urlencoded({ extended: true }));

// Serve turnstile-demo.html at the root URL
app.get('/', (req, res) => {
  res.sendFile(path.join(__dirname, 'turnstile-demo.html'));
});

app.use(express.static(path.join(__dirname)));

const SECRET_KEY = '0x4AAAAAAB5xKFIL9N0vcQW6m7XQbiC3UqA';

async function validateTurnstile(token, remoteip) {
  const formData = new URLSearchParams();
  formData.append('secret', SECRET_KEY);
  formData.append('response', token);
  if (remoteip) formData.append('remoteip', remoteip);

  try {
      const response = await nodeFetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
      method: 'POST',
      body: formData
    });
    const result = await response.json();
    return result;
  } catch (error) {
    console.error('Turnstile validation error:', error);
    return { success: false, 'error-codes': ['internal-error'] };
  }
}

app.post('/submit', async (req, res) => {
  const token = req.body['cf-turnstile-response'];
  const ip = req.headers['cf-connecting-ip'] || req.headers['x-forwarded-for'] || req.ip;

  const validation = await validateTurnstile(token, ip);

  if (validation.success) {
    res.send('Form submission successful!');
  } else {
    res.status(400).send({
      message: 'Invalid verification',
      errors: validation['error-codes']
    });
  }
});

app.listen(3000, () => console.log('Express server running on http://localhost:3000'));