Challenge Actions · demo origin

This host serves the page after a challenge passes.

Each path on challenge-endpoint.nobledemos.com is gated by a Cloudflare WAF Custom Rule whose action is a challenge. The challenge runs before any code on this Worker. If you reach the welcome page, the challenge succeeded.

Managed Challenge

Cloudflare picks the lightest interstitial that still proves the visitor is human — usually invisible, sometimes a Turnstile widget.

Try Managed Challenge →

Interactive Challenge

The classic "I'm not a robot" checkbox. Always visible, always requires a click. Useful when you want a deliberate user gesture.

Try Interactive Challenge →

How the rules are wired

  1. WAF Custom Rule on zone nobledemos.com matches http.host eq "challenge-endpoint.nobledemos.com" and http.request.uri.path eq "/managed-challenge" → action Managed Challenge.
  2. Same shape for /interactive-challenge with action Interactive Challenge.
  3. If the visitor satisfies the challenge, the request reaches this Worker, which serves the welcome page.