I'm trying to use Service Tokens with Cloudflare Access but they are seemingly not working...
Steps taken:
1. Created service token 2. Added
CF-Access-Client-Id
CF-Access-Client-Id
and
CF-Access-Client-Secret
CF-Access-Client-Secret
headers 3. Added an Include rule for the service token in question in the Access application's additional rules
Cloudflare just completely ignores the
CF-Access-Client-Id
CF-Access-Client-Id
and secret and shows that it has never been used before, and it redirects to the Cloudflare Access sign in page.
In desperation, I also added rules to allow any access service token both to the application and the access group of the application, which also did not work.
I've tried it from a Cloudflare Worker, Curl, and Fiddler and in any case despite passing the CF-Access headers it just redirects without giving a JWT.