OpenWAF Verify — live widget demo
This page embeds the OpenWAF Verify widget exactly as a customer would: the script is served by the OpenWAF edge on
this host (/__waf/challenge/v1/widget.js), the proof of work runs in a same-origin Web Worker, and the page's
Content-Security-Policy is default-src 'self'. The token below is single use, valid for 5 minutes and
redeemable once with the widget's secret at POST /__waf/challenge/siteverify.
Token
The interactive step
A real browser passes the widget above without doing anything. When the browser reports that it is automated, a
managed widget asks for one click instead. This second widget uses the test site key
owk_test_interactive, which always shows that step, so you can see it here; its token is the fixed test
token v1.TEST.TOKEN.
Your own accent colour
By default a widget takes the zone's challenge colour. data-accent sets another one per widget; the
widget adjusts it if it would not reach WCAG AA contrast on the light or dark theme. This one uses
data-accent="#e63946", the compact size (data-size="compact") and the test site key
owk_test_interactive, so the accent shows on its button.