Diagnostic proof of concept
Cloudflare Cross-Account Access Test
This page reads the current Pages Access identity, then makes a direct, credentialed browser request to a separately protected Worker.
Account A
Pages Access session
- Authenticated email
- Not loaded
- Identity source
- Cloudflare Access on this Pages origin
Account B
Worker Access session
- Worker URL
- Not configured
- Authentication
- Open the Worker directly to complete its independent OTP sign-in.
Use a normal browser profile for the first test. Cross-site cookie restrictions can prevent the Worker Access cookie from being sent.
Result
Cross-account request
- Account A email
- —
- Account B email
- —
- Identity match
- —
- Worker received
- —
First make sure you opened the Worker and completed Account B's One-Time PIN login. If that is complete, check:
- the Worker's
ALLOWED_ORIGINsetting; - browser third-party or cross-site cookie restrictions;
- Cloudflare Access CORS behavior; and
- whether the request accidentally triggered an
OPTIONSpreflight.
Raw response
No response yet.