Open scmanjarrez opened 1 year ago
same here.
I'm not able to get use a valid access token from cloudflared access login
command since the command will ask the approve 2 times and then fail with the error Could not verify token error="failed to verify token"
.
The token actually is generated and saved in the ~/.cloudflared
folder but it's unusable because when calling the actual endpoint with curl -H 'cf-access-token: <JWT>'
I get a 302 to the login page.
Everything works from the browser and if I copy/paste the cookies from the browser flow on the curl command I get access to the app.
same as @notdodo here.
I would add as context that the application policy in our case is set to ALLOW
, include login method Okta, require okta group membership.
we are correctly logging in via Okta and are in the correct group, as observed by being able to access the application from the browser - but no luck with the token from cli.
solved for us - turns out the "require binding cookie" setting is what prevents tokens to be used via CLI. turning it off for the app starts working.
Hi, I've configured my gitlab server to use cloudflared to generate https and ssh tunnels. The ssh tunnel is working fine when cloning, however, the https endpoint doesn't work.
Describe the bug Whenever I try to clone using https, I'm redirected to Cloudflare Access portal when I send the following cookie:
cookie.txt, obtained from
cloudflared access token -app=https://gitlab.myhost.es
Git clone
However, sending the cookies used by the browser skips the access portal: cookie2.txt, obtained inspecting browser request
Git clone
Cloudflared configuration:
Expected behavior Clone the repository
Environment and versions
Additional context I've tried pre-login with cloudflared, but it exits with "Could not verify token" error after accepting the two banners.