Setting up Railway SSO with Cloudflare Zero Trust

4 months ago

Hiya! I'm setting up Zero Trust with Railway SSO but am running into this problem:

Cloudflare is really weird in its oauth flow (i've written an oauth server before dont ask me why) and sends its client secret in a basic auth header base64 encoded (the glory of 30 year old centralised legacy standards). I'd love if Railway worked with this.

Attachments

image.png

$30 Bounty

2 Replies

danny

PROOP

4 months ago

(and also if there'd be a native "Private Domain" toggle 👀)

xmrafonso

FREE

4 months ago

Hey,

If I am not mistaken, this is an OIDC problem. CF Zero trust is missing the required scopes. Most likely the email scope. Can you double check that?

Welcome!