TLDR Tech / InfoSec
Unlocking the Cloudflare app ecosystem with OAuth for all
Cloudflare's June 3 self-managed OAuth release lets any customer register and manage their own OAuth clients for scoped, delegated access to the Cloudflare API, replacing the API tokens that previously gated SaaS integrations, internal developer platforms, and agentic tooling. This is Cloudflare's own launch write-up, and much of it reads as an engineering retrospective on migrating the underlying Hydra engine via sequential 1.X and 2.X blue-green upgrades, alongside clearer consent prompts, dashboard revocation, and visible app ownership to curb OAuth phishing.
Read the full story