cloudflare / cloudflare/cloudflared

🐛 Problems with auth via service token

Open
#1,104 9 comments 0 reactions 0 assignees View on GitHub
Priority: Normal Type: Bug
Dominant language
Go
Stars
15.6k
Forks
1.4k
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
I'm setting up a tunnel to my server to access ssh via zero trust. It is necessary to be able to log in without additional authentication, and for this I created a secret token. Keys were ignored and sent me to the confirmation page. Here is the config I used:
```
Host domain
ProxyCommand cloudflared access ssh --service-token-id example.access --service-token-secret example1234 --logfile "/home/ddd/log/cloudlog.txt" --log-level debug --hostname domain
User root
IdentityFile ~/.ssh/id_rsa
```

**To Reproduce**
Steps to reproduce the behavior:
1. configure access keys
2. Add config to .ssh/config
3. proxy redirects you to browser and force you to log in via selected authorization method

**Expected behavior**
automatic connection to the server via ssh without entering authorization data.

**Environment and versions**
- OS: Fedora Linux 39 (Workstation Edition)
- Architecture: AMD
- Version: cloudflared version 2023.10.0 (built 2023-10-31-1234 UTC)

- OS: Microsoft Windows 11 Pro (10.0.22621 build 22621)
- Architecture: AMD
- Version: cloudflared version 2023.10.0 (built 2023-10-31-1231 UTC)

**Logs and errors**
{"level":"debug","time":"2023-11-09T10:58:05Z","message":"Websocket request: GET / HTTP/1.1\r\nHost: domain\r\nCf-Access-Client-Id: example.access\r\nCf-Access-Client-Secret: example1234\r\nUser-Agent: cloudflared/2023.10.0\r\n\r\n"}

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.