Companion App not working through cloudflare tunnel but browser is

[boreal radish]

Having sort of an odd issue. I've been working on getting home assistant set up through a cloudflare tunnel, and it works well through either my phone or computer browser. I have it set up through zero trust,l and the cloudflared addon. It asks for authentication via email or Google, and if I authenticate correctly it takes me to the home assistant login page.

But if I use the home assistant app, it opens a browser for the zero trust authentication and then immediately tells me it's an invalid login session (screenshot attached)

Any ideas on why this may be happening or ways of troubleshooting it?

[fringe belfry]

so you put the authentication on cloudflare...

probably most likely the app can not handle the way they do that....

not tested this myself...

so my assumption is the token doesn't reach the app somehow...

[novel pilot]

Additional authentication layers like you've added are not supported with the HA companion app

[boreal radish]

Thanks for the assistance. Will disable it, then!

[fringe belfry]

that works fine, I have that running with two HA instances connected 😛

just make sure to setup MFA for the HA Account and maybe ip banning on wrong logins?

[boreal radish]

Yeah, I currently have cloudflare set up to block any out of country IP addresses and have MFA enabled. Banning wrong logins is smart too

[fringe belfry]

yep and you'll see any wrong login in the log...

or more specific that generates a notification