New login timeout makes cloudflare tunnel auth impossible to use, please revert.

[rickarddahlstrand]

I use cloudflare tunnels (zero trust) to protect my installation and it used to work fine. Now whenever I try to login it will revert to the "You are disconnected"-screen after a few seconds and reset the login just seconds before I get the chance to enter the one-time code.

Is there a way to restore the previous way that would allow me to enter the one-time-code and get thru the cloudflare auth process?

[bgoncal]

Secondary auth methods are not supported by the App.

#3575

[rickarddahlstrand]

Can you please reconsider, if you make the timeout just a couple of seconds longer it will work just fine. I can't use the app as it is today and have reverted to using it in the browser.

[rickarddahlstrand]

Or make the timeout a configuration option that I can enable/disable or change the value for.

[bgoncal]

Even if the timeout becomes customizable, you will face issues using the app when you need to reauth and the app is in background, since it's not something the App supports it will not tell you that you need to reauth with cloudflare, it will just start failing and you wont know why background operations/activity are not working.

[TimoPtr]

Hey @rickarddahlstrand, you could consider using the Cloudflare client warp instead of handling the auth in the HA app. You would login still using your github account to your zero trust team and it would keep the connection open with Cloudflare.

Only downside is to have another app installed.

[rickarddahlstrand]

Thanks for your swift replies! 👍

Yes, but I have a long timeout (30 days), and when this happens, I just reauth quickly.

Yes, I can use the client, but I don't want it active all the time since some of my other apps stop working. There are other auth options like Google, GitHub, adding HTTP headers, but these are also not supported, and this one-time password is my best option.

I fully accept that my solution is not supported and recommended, but since it used to work before the new timeout, all I ask is to have the option to temporarily disable it or lengthen the timeout.

[bgoncal]

If you hit the close button on the top right corner, isn't already enough to see cloudflare again?

[rickarddahlstrand]

Thanks!! That worked!! But now I, however, am getting a connection error because the client adds /?external_auth=1 to my URL.

[bgoncal]

Yup, because it expects to be a Home Assistant URL in there, not cloudflare's :/ this I can't change

[rickarddahlstrand]

But the connection is now open to the server, why doesn't it allow the app to connect? It there something I can change on the server side?

[rickarddahlstrand]

The URL is the Home Assistant URL and it's working.

[bgoncal]

Without more details I don't really know, want to ping me in Discord and have a chat? (bgoncal2)