My web server uses curl to retrieve direct upload URLs from
api.cloudflare.com
This facilitates user’s uploading images with the direct upload feature. However, I am seeing that when the web server makes a request to
https://api.cloudflare.com/client/v4/accounts/74a0dd3cc1a334ffb0baed7c805d6d4d/images/v2/direct_upload
it is getting a cloudflare challenge. It’s a server, so it can’t complete the challenge.
The challenge is including a script that points to this endpoint:
/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1
It looks like since the challenge comes from
api.cloudflare.com
None of my website settings seem to affect this. I’ve tried setting my security level to essentially off and disabling browser integrity check on my website, without success. That makes sense, because
api.cloudflare.com
is not my domain. What can I do?