[Due for payment 2025-10-27] [Due for payment 2025-10-23] Copilot is redirected to https://expensifycom.cloudflareaccess.com/ after being deleted

[jponikarchuk]

If you haven’t already, check out our contributing guidelines for onboarding and email contributors@expensify.com to request to join our Slack channel!

---

Version Number: v9.2.32-0
Reproducible in staging?: Yes
Reproducible in production?: No
If this was caught during regression testing, add the test name, ID and link from BrowserStack: https://test-management.browserstack.com/projects/2219752/test-runs/TR-1305/folder/13176687/41236701/955758113?sort=-identifier
Email or phone of affected tester (no customers): n/a
Issue reported by: Applause Internal Team
Device used: Mac 15.4.1 Safari/Chrome, Desktop, iPhone 13 iOS 28.6.2 Safari
App Component: User Settings

Action Performed:

Precondition: Login as copilot on the main account and the primary account on the second device

1. Navigate to https://staging.new.expensify.com
2. Login as the main account on the secondary device
3. Navigate to Settings > Security
4. Remove Copilot access from the account

As a Copilot
5. Observe the copilot account

Expected Result:

The copilot should be logged out when the primary account removes access

Actual Result:

Copilot is redirected to https://expensifycom.cloudflareaccess.com/ after primary account removes access

Workaround:

Unknown

Platforms:

• Android: App
• Android: mWeb Chrome
• iOS: App
• iOS: mWeb Safari
• iOS: mWeb Chrome
• Windows: Chrome
• MacOS: Chrome / Safari
• MacOS: Desktop

Screenshots/Videos

1.mp4

View all open jobs on GitHub

Issue Owner

Current Issue Owner: @Christinadobrzyn

[melvin-bot]

Triggered auto assignment to @Christinadobrzyn (Bug), see https://stackoverflow.com/c/expensify/questions/14418 for more details. Please add this bug to a GH project, as outlined in the SO.

[melvin-bot]

Triggered auto assignment to @NikkiWines (DeployBlockerCash), see https://stackoverflowteams.com/c/expensify/questions/9980/ for more details.

[melvin-bot]

💬 A slack conversation has been started in #expensify-open-source

[github-actions]

👋 Friendly reminder that deploy blockers are time-sensitive ⏱ issues! Check out the open `StagingDeployCash` deploy checklist to see the list of PRs included in this release, then work quickly to do one of the following:

1. Identify the pull request that introduced this issue and revert it.
2. Find someone who can quickly fix the issue.
3. Fix the issue yourself.

[NikkiWines]

Able to reproduce on staging and dev - I think i found the root cause

[NikkiWines]

I think this is coming from #72668 - this added the supportal restore redirect... we need to differentiate between supportal users and copilots that need to be restored to their own accounts