Why is captcha required on signin but disallowed when provided?

[Rc85]

I have hcaptcha enabled and when I try to use the signInWithPassword method, it returns

code: 500
error_id: "84cf96e2655c7107-YVR"
msg: "captcha verification process failed"

The method doesn't allow options to be provided but when I do, I get

code: 400
msg: "captcha protection: request disallowed (invalid-input-secret)"

Is it because I'm sending request from localhost?

[santiarr]

bump

[lior-amsalem]

a good question, i have the same problem

i've confirm: secret & app keys
i've added localhost to cloudflare
i've used the dummy key for local host
(and am getting dummy token submitted to supabase)
i've made sure supabase key of cloudflare is correct.