ERR_TOO_MANY_REDIRECTS about apache_2fa HOT 2 CLOSED

$ sudo python3 -m pip install onetimepass
$ cd /var/www/mydomain.com/web
$ git clone https://github.com/itemir/apache_2fa
$ mkdir apache_2fa/state
$ sudo chown -R ispconfig_user:ispconfig_group apache_2fa
$ cd apache_2fa
$ sudo chmod 750 state
$ sudo chmod 640 tokens.json

# path to protected directory --> /var/www/mydomain.com/web/public_html
# path to apache_2fa          --> /var/www/mydomain.com/web/apache_2fa

DocumentRoot /var/www/mydomain.com/web/public_html

ScriptAlias /auth/ /var/www/mydomain.com/web/apache_2fa/

<Directory /var/www/mydomain.com/web/apache_2fa>
    Options +ExecCGI

    <FilesMatch "^[^\.]+$">
        SetHandler cgi-script
    </FilesMatch>

    AuthType Digest
    AuthName "mydomain.com"
    AuthDigestDomain /
    AuthDigestProvider file
    AuthUserFile /var/www/mydomain.com/web/apache_2fa/apache_credentials
    Require valid-user
</Directory>

<Directory /var/www/mydomain.com/web/public_html>
    RewriteCond %{REQUEST_URI} !^/auth/
    RewriteCond %{HTTP_COOKIE} !^.*2FA_Auth=([a-zA-Z0-9]+)
    RewriteRule ^(.*)$ /auth/auth?%{REQUEST_URI} [L,R=302]

    RewriteCond %{REQUEST_URI} !^/auth/
    RewriteCond %{HTTP_COOKIE} ^.*2FA_Auth=([a-zA-Z0-9]+)
    RewriteCond /var/www/mydomain.com/web/apache_2fa/state/%1 !-f
    RewriteRule ^(.*)$ /auth/auth?%{REQUEST_URI} [L,R=302]

    AuthType Digest
    AuthName "mydomain.com"
    AuthDigestDomain /
    AuthDigestProvider file
    AuthUserFile /var/www/mydomain.com/web/apache_2fa/apache_credentials
    Require valid-user
</Directory>