When the authorisation cookies expire (CF_Authorization) it redirects the user to a generic error page. Image bellow [Screenshot from 2024-07-11 10-16-51] The expected behaviour is to show the refresh pop-up page. that happens when the Discourse _t cookie expires. Image below. [Screenshot from 2024-07-11 10-19-08] Ideas that didn’t work: Since the cookie is secure we can not get it using JS. The Cloudflare team can not extend the expiry date for security reasons. Does anyone have an idea how can we solve this issue?

Other than breaking discourse, what problem is the cloudflare authorization solving? I thought that there was a site setting for how long discourse cookies last, but maybe it’s hidden.

[image] Jay Pfaffman: I thought that there was a site setting for how long discourse cookies last, but maybe it’s hidden. I’m not sure. The CF_Authorization is not a Discourse cookie. The problem is that the Cloudflare cookie triggers before the Discourse cookie _t.

You can try changing persistent sessions or maximum session age. Why is the cloudflare cookie important?

[image] Jay Pfaffman: You can try changing persistent sessions or maximum session age. [Screenshot from 2024-07-11 12-00-47] It didn’t work.

[image] Jay Pfaffman: Why is the cloudflare cookie important? I’m not sure. I will try to get more info on that.

Still not working. I open the forum in a Anonymous browser and after deleting the CF_Authorization cookie the same generic page was shown.

Oh, sorry. I guess I don’t understand what that cloudflare thing is doing. Can you do without it?

Cloudflare cookie: CF_Authorization

Product Support

pfaffman (Jay Pfaffman) July 11, 2024, 11:11am 7

I think you’d need to delete your existing cookies after changing those settings. They will affect only new sessions and be cookies.

Topic		Replies	Views
Session expired Development	0	101	July 18, 2024
Asking about discourse invalid_access Development	2	437	June 2, 2024
Login and Logout Errors from Cache Settings Conflict with Cloudflare Product Support cloudflare	31	1058	January 7, 2025
OAuth2 csrf_detected with Discord 'Connect' functionality SSO	14	2395	June 16, 2022
Can't login to Discourse ID with Facebook Product Support discourse-id	9	530	November 25, 2025

Cloudflare cookie: CF_Authorization

Related topics