Herald
OpenapiAuth

Get Turnstile configuration status for a Client App

Returns whether Turnstile verification is enabled for the specified Client App and the site key to render the widget. Turnstile is fully delegated to the Client App (D-PROTECT-01); the legacy realm_config source is no longer read. A missing or disabled Client App is rejected with 401, matching the other anonymous Client-App-bound endpoints. Pass `clientId` as a query parameter.

GET
/api/auth/{realmId}/turnstile/status

Returns whether Turnstile verification is enabled for the specified Client App and the site key to render the widget. Turnstile is fully delegated to the Client App (D-PROTECT-01); the legacy realm_config source is no longer read. A missing or disabled Client App is rejected with 401, matching the other anonymous Client-App-bound endpoints. Pass clientId as a query parameter.

Path Parameters

realmId*string

Realm ID

Query Parameters

clientId*string

Client App public identifier (1-36 chars)

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/api/auth/string/turnstile/status?clientId=string"
{  "enabled": true,  "siteKey": "string"}
{  "code": "string",  "details": null,  "message": "string",  "requestId": "string",  "status": 0}
{  "code": "string",  "details": null,  "message": "string",  "requestId": "string",  "status": 0}
{  "code": "string",  "details": null,  "message": "string",  "requestId": "string",  "status": 0}