20 days ago
My project is on the Hobby plan and normal visitors are being served the railway-hikari "Checking your browser" Turnstile challenge, which loops — the verification POST to /.railway/__challenge fails and the widget resets repeatedly. Trace: railway-hikari/sin1.tr00, edge sin1. This is a small Next.js app with very little traffic. Why is it being challenged, and can the challenge be disabled for this domain?
1 Replies
20 days ago
Your service has Under Attack Mode enabled, set to stay on until manually disabled. That is what shows the browser challenge to every visitor. You can turn it off in your service's Settings under the Edge section by clicking Deactivate, or via the CLI with railway waf under-attack disable.
Status changed to Awaiting User Response Railway • 20 days ago
Status changed to Solved bindingsoul • 20 days ago