I ve a Pages app with a custom domain
I've a Pages app with a custom domain, and I use Access in front of it to control who can access the entire site. Everything is blocked by default, apart from some public paths. There's a www. on the domain, also using Cloudflare, which points to an origin where we run a WordPress.
When APO is enabled on the origin, it causes a redirect loop problem on our Pages app.
1) We go to
https://console.rutherfordspunting.com/, we are HTTP 302'd to https://rutherfordspunting-pages.cloudflareaccess.com/cdn-cgi/access/login/console.rutherfordspunting.com?kid=... which is our Access team/company name/URL.
2) We authenticate succesfully. Access' access log shows these authentications as successful, saying "Access granted". We get 302'd again to https://console.rutherfordspunting.com/cdn-cgi/access/authorized?nonce....
3) That request then 302's us back to https://console.rutherfordspunting.com/
4) ...which goes back to step 1, and loops.
Took quite a while to figure this out. I'd love to understand what's going on. Is it something to do with the addition headers added on requests via APO, i.e. cf-apo-via?1 Reply
Oddly enough, disabling APO made it work everywhere except Chrome (tested on a lot of computers). I opened a support ticket with Cloudflare and I'll update here once we fix thies.