Turnstile Captcha for self-host

[danez]

I would love to use Turnstile for my self hosted AFFiNE. I already injected the site-key correctly, and also set the secret key in the config and enabled the service, but it does not let me login. When I press login it simply reloads the captcha widget before it disapears again.

All I see in the logs is:

[Nest] 435  - 11/20/2025, 8:02:57 PM   DEBUG [CaptchaService] <selfhosted:http:uuid> Challenge: x32D/WnFVb0GD736pmSOGUB2p3v+wBiaLx47HOWP3EfjgIc3fA86o+ytsTYrx9wH0lYyDQQO5v2YLS, Resource: 9e11cc2b-248a-43d2-97bd-962e08f6ea8f, Response: 0.RYoD9sdyc3TuHcBrOIGfgmgeP-EMBFxivazqi-p7LFl-B5IvydVxrkTf1xq8bJIZZxNq83fFXGpPfrPXTRZ0lliP4gXPrA723Ahgj4j3FGEyY2wMBawX2vV-dhMSTjGeaRIyMDt2WAa7Ce1npDwXGktIlJ00cQqB50QHBx3-VyFfxX9h-o60Z_uLN5Nenf4-e42OrcOuJjkVKceMCaJJ15Qen8ngoYpOKXuHvKNiujSUXiw1AoiPJydXkwHgPVDsANvY7cSakKigfMXKUODFzJrQ8lLvOC3D3QbG4y3_m6ocNA3nI6YUbnyHb6b-uGAV-HKdavS8m3NOsG3HEAmKHbd1AuXRMJBQHaQXAXHwcWe5ybpdDbpw31CzNezM8IChIvvLLsG4UCsQVcnj1mV3JufEFNK6Cz6T_RPkCmg_R4OGAXYYS7ZPs1RkcjqWoywqwUikL-LoZGO_dwjx9UlFxoJO8lcKQzwJZBUzKcDePcLKQoKlBce3ac_Ts8hs5lNAff_Wh3d0ynn-wErHgqUNn4avOVsdsLEgESTYYyNY5xon-wqiukSSBXvwgpJ7kCrihrzlZGiBxV0K8rKGIxQRA1dVTiRjqtkvCZg6IT2Dol_cMlcDlCkI3rf_-2CgtTd3qQpW1IXGaVyCws0ZRav8wK8kwDUqIoBq0zUGmxZVd-01MRoSA1EICmYripT7dVHgi3J3rahM6TC89RVH_r_X0fWIonROol07sQ8Pt9f84_TeISORSvTOiVNgmc_kZ23h3znS0J5riXFx0C8ogbmico6gWEpnp0GpTzrv3zynkzq3x06koNyJEU.U3Kjhy1VzHqG0SdP81PmyA.cb87a42259ca9c7d4f812682fc7a915fec7a4078f74df65d3945c080f74d21bd, isChallengeVerified: false

In the cloudflare dashboard I do see some successful verifies though.

Is there something missing?