Cloudflare Access breaks UV and/or bare server

[r58Playz]

Issue tracker is ONLY used for reporting bugs. New features should be discussed on our Discord server.

Expected Behavior

UV works

Current Behavior

V3.ts fails to fetch the bare response.

Access to fetch at 'https://r58playz.cloudflareaccess.com/cdn-cgi/access/login/...' (redirected from 'https://.../bare/v3/?cache=008ec4453ff31513f43893cba7aa31c8') from origin '...' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Possible Solution

Maybe pass cookies to the fetch request?

Steps to Reproduce

1. Host something that uses UV behind cloudflare access
2. Load a page

Context (Environment)

I am trying to accomplish making a private aboutproxy instance

Detailed Description

Possible Implementation

[Notplayingallday383]

Velocity isn’t working just cus the bare is down or if you don’t understand that the server it sends the proxies network traffic through is down

[44011406]

when i upload the code to replit, it wont work, it says network error, even tho there isnt an error

[rifting]

Don't run on replit

[r58Playz]

Also stop commenting on unrelated issues

[e9x]

misclick

[pipoblak]

Hey, news about it?

[IncognitoTGT]

First, make a new group that includes everyone.
make another application (self-hosted), and in this case, add the same domain, and then the /bare/ path.
Click next, and make a policy. Change the include dropdown to bypass, and set the everyone group in the bottom.

[r58Playz]

I do not want to expose my bare server. That is the main reason I am using Cloudflare Access in the first place. Only authenticated users should have access to the proxy.

[itschasa]

I do not want to expose my bare server. That is the main reason I am using Cloudflare Access in the first place. Only authenticated users should have access to the proxy.

Then you'll need to change how bare requests are sent, so they include that authentication cookie