search

titaniumnetwork-dev / Ultraviolet

A highly sophisticated proxy used for evading internet censorship or accessing websites in a controlled sandbox using the power of service-workers. Works by intercepting HTTP requests with a service worker script that follows the TompHTTP specifications.
https://docs.titaniumnetwork.org/proxies/ultraviolet
GNU Affero General Public License v3.0
508 stars 3.99k forks source link

Cloudflare Access breaks UV and/or bare server #74

Open r58Playz opened 1 year ago

r58Playz commented 1 year ago

Issue tracker is ONLY used for reporting bugs. New features should be discussed on our Discord server.

Expected Behavior

UV works

Current Behavior

V3.ts fails to fetch the bare response.

Access to fetch at 'https://r58playz.cloudflareaccess.com/cdn-cgi/access/login/...' (redirected from 'https://.../bare/v3/?cache=008ec4453ff31513f43893cba7aa31c8') from origin '...' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Possible Solution

Maybe pass cookies to the fetch request?

Steps to Reproduce

  1. Host something that uses UV behind cloudflare access
  2. Load a page

Context (Environment)

I am trying to accomplish making a private aboutproxy instance

Detailed Description

Possible Implementation

Notplayingallday383 commented 1 year ago

Velocity isn’t working just cus the bare is down or if you don’t understand that the server it sends the proxies network traffic through is down

44011406 commented 1 year ago

when i upload the code to replit, it wont work, it says network error, even tho there isnt an error

rifting commented 1 year ago

Don't run on replit

r58Playz commented 1 year ago

Also stop commenting on unrelated issues

e9x commented 11 months ago

misclick

pipoblak commented 9 months ago

Hey, news about it?

IncognitoTGT commented 9 months ago

First, make a new group that includes everyone. make another application (self-hosted), and in this case, add the same domain, and then the /bare/ path. Click next, and make a policy. Change the include dropdown to bypass, and set the everyone group in the bottom.

r58Playz commented 9 months ago

I do not want to expose my bare server. That is the main reason I am using Cloudflare Access in the first place. Only authenticated users should have access to the proxy.

itschasa commented 6 months ago

I do not want to expose my bare server. That is the main reason I am using Cloudflare Access in the first place. Only authenticated users should have access to the proxy.

Then you'll need to change how bare requests are sent, so they include that authentication cookie