Browser challenge and server verification
After the Turnstile widget returns a token, the browser sends it with the form to a Pages Function. The function calls Siteverify and checks the returned hostname and action before proceeding to email delivery.
Find the failing stage
Check the production widget configuration, verify that the server accepted the token, then compare the mail provider’s response with the recipient’s inbox. Keep detailed diagnostics on the server and show a clear retry message to visitors.
Test success and failure
Automated tests cover invalid fields, origin checks, rate limits, token verification, and email retries. A production smoke test uses a real form submission to confirm delivery.