though its a little difficult to find the tags without knowing an existing post that has one

yea also I think it's not consistent

for example, https://blog.cloudflare.com/tag/d1/

not seeing this: https://blog.cloudflare.com/d1-turning-it-up-to-11/

hmm yeah looks like nobody tagged that post with d1 🙁 i wonder why

guys please fix it asap, as alot of Plarium RAID players raging on their channel. Of course i am ironic 🤣

CloudFlare

gonna be a CF side project if I don't find anything or someone doesn't beat me to it 😅

can automate it with GPT, it's very good with categorizing posts. I've hooked it up to the WP API and had it auto tag hundreds of posts before

you can't bypass Access with a header value? 😦

you can https://developers.cloudflare.com/cloudflare-one/identity/service-tokens/

ohh interesting

If you're using it with CF Tunnels/any application that validates the JWT Access Sends, make sure to use "Service Auth" rather then "Bypass". Bypass literally bypasses Access and falls back to zone security stuff, no jwt included. Service Auth goes through the flow without an identity and sends a jwt. If you're using Tunnels with the Access setting, and use Bypass, you'll get a blank screen with a 403

ah we are just putting it in front of Pages to hide our staging sites

so I think Bypass is fine?

wouldn't break anything if you used it. I warn people about that because it's confusing when you hit it lol. In a perfect world you'd validate the jwt eitherway, but if it's just staging sites I'm guessing it's not the biggest thing to protect

hmm I don't understand

all I did was select Bypass then add the Service Token

I will try just adding it as an Include to an existing Policy?

Service tokens won't work in an Allow policy

yeah it didn't work

any idea why I get that error?

it is just a new Bypass policy with a single Include

ahh opps, you can only use Service Tokens with the Service Auth policy

for some reason I thought you could use them with bypass alone

shouldn't matter in reality though, just use the Service Auth action

ah it is working now. weird error message lol

uhhh

I was testing it by sending requests locally and when I remove the headers the request still goes through?

but when I visit in a browser I get the Access login page