How do I prevent users from bookmarking the post-auth redirect URL?

Cloudflare Access Reviews

Last Post by Kevin Brown 3 months ago

1 Posts

1 Users

0 Reactions

34 Views

RSS

Kevin Brown

(@kevinb)

Estimable Member

Joined: 3 months ago

Posts: 55

Topic starter 17/07/2026 1:23 pm [#8805]

Seen this issue twice now. Users bookmark the final redirect URL after Cloudflare Access auth, bypassing the login page entirely. Defeats the purpose.

Cloudflare's docs suggest this is by design. Their session cookies are the real control, but a bookmarked app URL with valid session still loads. Short session TTLs break the bookmark eventually, but that's a poor user experience. Looking for solutions that don't involve constantly annoying users.

Quote

Topic Tags