Validate suitability of managed challenges for our front door Vue pages

GitLab Infrastructure Service - incident.io
2026-04-02T23:05:41Z

_This ticket was created from_ [_INC-8925_](https://app.incident.io/gitlab/incidents/8925) _using_ [_incident.io_](https://app.incident.io) 🔥

https://developers.cloudflare.com/cloudflare-challenges/challenge-types/challenge-pages/#compatibility-limitations indicates that managed challenges do not work with XHR requests made by Vue pages. This isn't an issue for our older HAML pages that do not get affected by managed challenges returning a forbidden response.

This issue is for SRE team to review if the challenge type is correct to use or specify non interactive challenges to be run for XHR requests. Moving all front door pages off Vue isn't very viable and has a much bigger blast radius