rdmbair15m5-changelog-20260901-1243-eastcoastscience-net-cloudflare-access-and-www-301-alignment
rdmbair15m5-changelog-20260901-1243-eastcoastscience-net-cloudflare-access-and-www-301-alignment
Aligned eastcoastscience.net with dev.ecs0.net and dev.dataroo.net Zero Trust architecture: automated 301 www-to-apex redirection at Cloudflare edge and integrated Cloudflare Access with Google Passkey IdP.
Scope
- Hosts:
rdmbair15m5,rdmsm4x. - Cloudflare Zone:
eastcoastscience.net(b0a852be4eb841783823b7dc36a04881). - Cloudflare Access Application:
East Coast Science Portal(7b81ceb5-9795-4daf-b633-093034c1ca4b).
Exact Changes Made
- Edge 301 Redirect for WWW:
- Created Cloudflare Page Rule matching
www.eastcoastscience.net/*forwarding 301 tohttps://eastcoastscience.net/$1.
- Created Cloudflare Page Rule matching
- Zero Trust Access Integration:
- Registered
East Coast Science Portalin Cloudflare Zero Trust Access. - Configured
auto_redirect_to_identity: truewith Google IdP (a36b8599-1cf3-4816-a340-f9958697d95e) for 30-day session lifetime (720h). - Restricted access to owner whitelist
(
[email protected],[email protected], etc.).
- Registered
- Google OAuth & IdP Alignment:
- Configured Google OAuth authorized origins with Cloudflare Access
team domains
(
https://eastcoastscience.cloudflareaccess.com,https://dataroo.cloudflareaccess.com,https://ecs0.cloudflareaccess.com).
- Configured Google OAuth authorized origins with Cloudflare Access
team domains
(
Verification Evidence
curl -sI https://www.eastcoastscience.net/products/rdDB->HTTP/2 301 Location: https://eastcoastscience.net/products/rdDBcurl -sI https://eastcoastscience.net/->HTTP/2 302(Redirects to Google Passkey IdP via Cloudflare Access)