Unable to sign in from China - auth server unreachable (auth.tinyhumans.ai DNS NXDOMAIN, app.openhuman.ai returns 530)

[ElioNeto]

Issue imported from tinyhumansai/openhuman#1998
Created at: unknown

---

Description

The OpenHuman desktop app (v0.53.43) cannot sign in when used from mainland China due to the backend authentication server being unreachable.

Findings

From the Windows machine located in China, we ran the following diagnostics:

1. DNS Resolution

Domain	Status
auth.tinyhumans.ai	❌ DNS NXDOMAIN - does not resolve at all (checked via system DNS and Google DNS 8.8.8.8)
app.openhuman.ai	✅ Resolves to 104.21.20.122 / 172.67.192.217 (Cloudflare)
api.tinyhumans.ai	✅ Resolves to 172.67.150.132 / 104.21.30.37 (Cloudflare)
tinyhumans.ai	✅ Resolves (main website works)

2. HTTP Connectivity

Endpoint	Result
https://app.openhuman.ai/	❌ HTTP 530 (Cloudflare - origin unreachable)
https://app.openhuman.ai/api/health	❌ HTTP 530 (Cloudflare - origin unreachable)
https://api.tinyhumans.ai/health	❌ HTTP 503 (Service Unavailable)
https://tinyhumans.ai/	✅ HTTP 200

3. Desktop App Behavior

• App starts up, but logs show: no session token at startup, scheduler gate set to signed_out
• The sign-in page shows in the CEF webview, but the actual auth request to the backend fails
• Attempting to sign in just hangs/returns errors

4. Network Environment

• The local machine sets a system proxy at 127.0.0.1:18412 (an application-level proxy), but even bypassing it doesn't help
• Direct connections (via curl, Invoke-WebRequest) also fail with the same errors
• The Cloudflare edge response (CF-RAY: SEA) indicates traffic is routed to Seattle servers - origin servers appear to be down or not responding

Impact

Users in China (and possibly other regions with restricted internet access) cannot use the desktop app at all, as cloud sign-in is required before any functionality becomes available.

Possible Solutions (for the dev team)

1. Ensure auth.tinyhumans.ai has proper DNS A/AAAA records and is accessible from international networks
2. Check the upstream origin server for app.openhuman.ai (currently returning 530 / origin unreachable)
3. Check api.tinyhumans.ai backend (currently returning 503)
4. Consider CDN/acceleration nodes for better global reachability
5. Consider an offline/self-hosted sign-in option for users in regions where the auth servers are unreachable