Like other people have suggested, maybe it's a good idea with better featured options supporting many more authentication and authorization options.

My personal pick is Authentik as it supports working as an OpenID, SAML, RADIUS, LDAP, and proxy. While also supporting external users from the likes of LDAP

If I had to guess maybe trusted proxies haven't been configured for Cloudflare preventing the Auth token from being accepted