cloudflare-turnstile-rails 0.11.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0d8fd3cb77f097623954e01bb7b8edf603f88334dde368099b0da253aae0b2e0
-  data.tar.gz: 134e4ea34f7e4a85e2a63971fd97bd3d709f388853a04b3efd67b247ff1bf7ba
+  metadata.gz: 167722dcdc89fe5d682e584a48fc218d3a6839225333f4a5cad66ec81a37ada9
+  data.tar.gz: f07de910ba89fea39e55a0389552b4cf6485419f928b460e89f025d7ee2af22a
 SHA512:
-  metadata.gz: 1961d3464fa15763ac0c536d969ba5b825f191711f55a4b62067a81bdd83120337872b85d3492afb72065cc5e1d5e8180db27b88eed33457bec91bec533fa23d
-  data.tar.gz: 5bf90db9a243711e0eced90efba52a5930914b035bc65cfde5d9e3981c418fd346e2d1bed4108cd58e12fd6706a302cc3c8a83d63b56a35835135b2463550139
+  metadata.gz: d7de00b3c2196a250e14a625168937203a7550d8850115379cc65c11d669df19604e5f0762f47747384ec558c53311f7425820b619e2db3de6eb10ab766a5191
+  data.tar.gz: 9120147af25bd3dcc6cf3c753b08e70b89a5b821f66eb2230edb17775361266cc4d6a5736303a30769593dd45d021d150b09cc1c95710e0437560bbe2f50e124

data/README.md

@@ -89,7 +89,7 @@ Supports `Rails >= 5.0` with `Ruby >= 2.6.0`.
   That's it! Though it is recommended to match your `theme` and `language` to your app's design and locale:
 
    ```erb
-   <%= cloudflare_turnstile_tag data: { theme: 'auto', language: 'en' } %>
+   <%= cloudflare_turnstile_tag data: { theme: 'light', language: 'en' } %>
    ```
 
 * For all available **data-**\* options (e.g., `action`, `cdata`, `theme`, etc.), refer to the official Cloudflare client-side rendering docs:
@@ -101,17 +101,31 @@ Supports `Rails >= 5.0` with `Ruby >= 2.6.0`.
 
 #### Simple Validation
 
-* To validate a Turnstile response in your controller, use either `valid_turnstile?` or `turnstile_valid?`. Both methods behave identically and return a `boolean`. The `model` parameter is optional but recommended for automatic error handling:
+* To validate a Turnstile response in your controller, use either `valid_turnstile?` or `turnstile_valid?`. Both methods behave identically and return a `boolean`. The `model` parameter is optional:
 
   ```ruby
   if valid_turnstile?(model: @user)
     # Passed: returns true
   else
-    # Failed: returns false, adds errors to @user
+    # Failed: returns false, adds errors to @user.errors
     render :new, status: :unprocessable_entity
   end
   ```
 
+* When **no model is provided** and verification fails, `valid_turnstile?` automatically sets `flash[:alert]` with the error message. This is useful for redirect-based flows:
+
+  ```ruby
+  def create
+    if valid_turnstile?
+      # Passed: no model needed
+      redirect_to dashboard_path, notice: 'Success!'
+    else
+      # Failed: flash[:alert] is automatically set
+      redirect_to contact_path
+    end
+  end
+  ```
+
 * You may also pass additional **siteverify** parameters (e.g., `secret`, `response`, `remoteip`, `idempotency_key`) supported by Cloudflare's API:
   [Cloudflare Server-Side Validation Parameters](https://developers.cloudflare.com/turnstile/get-started/server-side-validation/#required-parameters)
 
@@ -134,13 +148,14 @@ Supports `Rails >= 5.0` with `Ruby >= 2.6.0`.
   result = verify_turnstile(model: @user)
   ```
 
-  This method still adds errors to the model if verification fails. You can query the response:
+  This method adds errors to the model if verification fails, but unlike `valid_turnstile?`, it does **not** automatically set flash messages. This gives you full control over error handling:
 
   ```ruby
   if result.success?
     # Passed
   else
-    # Failed — inspect result.errors or result.raw
+    # Failed — handle errors yourself
+    flash[:error] = "Custom message: #{result.errors.join(', ')}"
   end
   ```
 
@@ -177,7 +192,7 @@ The `cloudflare_turnstile_tag` helper injects the Turnstile widget and accompany
 
 ### Turbo & Turbo Streams Support
 
-All widgets will re‑initialize automatically on full and soft navigations (`turbo:load`), on `<turbo-stream>` renders (`turbo:before-stream-render`), and on DOM mutations — no extra wiring needed.
+All widgets will re‑initialize automatically on Turbo navigations (`turbo:render`) and on `<turbo-stream>` renders (`turbo:before-stream-render`) — no extra wiring needed.
 
 ### Turbolinks Support
 
@@ -323,11 +338,8 @@ If you run into any issues after upgrading Rails, please [open an issue](https:/
 
 ## Troubleshooting
 
-**Duplicate Widgets**
-- If more than one Turnstile widget appears in the same container, this indicates a bug in the gem—please [open an issue](https://github.com/vkononov/cloudflare-turnstile-rails/issues) so it can be addressed.
-
 **Explicit Rendering**
-- If you've configured explicit mode (`config.render = 'explicit'` or `cloudflare_turnstile_tag render: 'explicit'`) but widgets still auto-render, override the default container class:
+- If you've configured explicit mode (`config.render = 'explicit'`) but widgets still auto-render, override the default container class:
 
   ```erb
   <%= cloudflare_turnstile_tag class: nil %>

data/lib/cloudflare/turnstile/rails/controller_methods.rb

@@ -19,7 +19,9 @@ module Cloudflare
 
         def valid_turnstile?(model: nil, **opts)
           response = verify_turnstile(model: model, **opts)
-          response.is_a?(VerificationResponse) && response.success?
+          success = response.is_a?(VerificationResponse) && response.success?
+          flash[:alert] = ErrorMessage.default if !success && model.nil?
+          success
         end
 
         alias turnstile_valid? valid_turnstile?

data/lib/cloudflare/turnstile/rails/version.rb

@@ -1,7 +1,7 @@
 module Cloudflare
   module Turnstile
     module Rails
-      VERSION = '0.11.0'.freeze
+      VERSION = '1.0.0'.freeze
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cloudflare-turnstile-rails
 version: !ruby/object:Gem::Version
-  version: 0.11.0
+  version: 1.0.0
 platform: ruby
 authors:
 - Vadim Kononov