[SOLVED]Unable to login to dashboard

[rocky palm]

When I try to log into the Cloudflare dashboard, I can’t click any buttons on the 2FA page. Firefox says that the page is slowing down Firefox. After I click the “Stop” button, I get error 1015.
Here’s the steps I take:

1. Goes to dash.cloudflare.com
2. Clicks the “Sign in with Google” button
3. Cancels the security key prompt
4. Tries to click the “authentication method or backup code” button, doesn’t even turn orange.
5. Firefox says that the page is slowing down Firefox, clicks the “Stop” button.
6. Reloads the page, gets error 1015

I’m trying to log into the dashboard to see if something is going on affecting my server. My server suddenly had a huge load spike, and last reported a load average of 168.53, with 30% average CPU usage.

[hidden cape]

The MFA prompt is spamming requests, their own site is DDoSing the login portal if you have 2fa enabled. There's something quite wrong, been going on for over an hour. Curious.

[tall heron]

i'm having the same problem

[primal tree]

Yes, happening for me too

[sage portal]

Same for me.

[dapper stirrup]

I have the exact same problem. Waiting for Cloudflare to communicate that they've fixed the issue. Their internal monitoring tools must be alerting them to the problem for sure.

[tall heron]

i hope so, as if i can't login i can't either open a ticket

[frigid shard]

Same problem

[hidden cape]

Yep unless you have a premium SLA agreement you have no way of making a ticket without signing in lol

[rocky palm]

You can’t even make a support ticket. You have to be logged in to make one, but you can’t log in.

[tall heron]

isn't there any hotline phone number?

[hidden cape]

That's what the premium SLA gets you. And even then you usually still have to sign in first to get a code

[tall heron]

hahaha

[dapper stirrup]

Haha, Catch-22!

[hidden cape]

So pay probably around 20k a month to be unable to submit a ticket

[dapper stirrup]

Fortunately for me I'm just working on a hobby project. I'd hate to have a production problem as a business right about now.

[hidden cape]

There's an email address but it'll get ignored if your email isn't tied to a premium account

[rocky palm]

You can’t alert them to the problem, because the problem stops you from alerting them to the problem.
We probably need to ping someone here to tell them.

[tall heron]

i'm too, but i hate not being able to access my homelab site beacouse of an SSL missmatch and not having a way to fix it

[hidden cape]

That's us right now, sorta, we were exploring buying Cloudflare access, but this doesn't exactly inspire confidence lol

[little bear]

also happening for me https://dash.cloudflare.com/two-factor is flooding fetch to https://dash.cloudflare.com/api/v4/user/two_factor_authentication/security_key/login

[tall heron]

someone must have vibe-coded and pushed without review 😂

[rocky palm]

Do we need to ping Vero? This seems urgent.

[hidden cape]

We have like 20 domains with them, with no way to reach out without signing in.

[little bear]

@jolly bough -- hard to tell who else is on the team

[hidden cape]

But I'd consider it a sev1 issue given the criticality of logging in

I'd feel better if it was at least acknowledged on their status page

[tall heron]

shouldn't it be an automatic check to determ wheter it works or not?

[hidden cape]

Well, login works fine if you're SSO with Enterprise or have no MFA

Probably not something they considered having gated with an automated test

[tall heron]

could be

just hoping they solve it quick

[hidden cape]

But given that it's causing us to basically DDoS their login endpoint, I'm sure it's being noticed by their NOC team

Now as to when it'll get escalated who knows

[tall heron]

at first i was thinking that my 1password was faulting and begin to crying as i had nearly everything stored int it

oh, they infact did noticed it a while ago

[hidden cape]

Unrelated I believe

[rocky palm]

I wonder who pushed this update to the frontend without seeing that it’s DDoSing the backend…

[hidden cape]

"Testing is at least one of our priorities"

(I kid I love you guys ♥️)

[tall heron]

it should be, i've checked trough the json status api of cloudflare and it says the same thing with the time being due half an hour ago

[hidden cape]

The Json status API is the same as what's presented on the status page itself

[tall heron]

and they are defining it as something like "who cares if you can't access, is not that big of a problem"

[hidden cape]

Because authentication isn't impacted with Access

[half steppe]

maybe it's just a coincidence, cause i don't see any correlation between cloudflare access having delayed config changes with accessing the cloudflare dashboard

its working again

for me

just logged in

[primal tree]

Working now

[hidden cape]

Eyy look at that

[dapper stirrup]

Working for me as well. Nice!

[hidden cape]

Hope they acknowledge it

Outage preventing login for a few hours is pretty substantial

[tall heron]

yep

not that they got other cases in the past, but still substantial

[hidden cape]

Eyy they acknowledged it