Turnstile protection for rest api?

This plugin has been fantastic, thanks very much!

But one thing that it seems to be missing is protection for rest api endpoints. In particular, I use the buddyboss platform (a derivative of buddypress) which has a registration endpoint that bots have recently figured out how to use. Many sites are getting flooded with spam users.

I shared a snippet with the BB community to disable that endpoint, but that affects their native app.

More generally, lots of plugins and themes (and headless apps) use rest APIs. It would be fantastic if there were a way for these to hook into your plugin to validate any post requests that don’t come from a client that has the turnstile widget embedded.

Do you think this might be possible? If so, id be happy to help with the implementation

Thanks!

• This topic was modified 8 months, 3 weeks ago by Nick.