Cloudflare opens self-managed OAuth to all developers
Now any developer can create OAuth clients for the Cloudflare API with full control.
Deep Dive
Cloudflare has launched self-managed OAuth, allowing all developers to create and manage OAuth clients for delegated access to its API. Previously limited to manually onboarded partners, the feature now supports scoped access, clearer consent, and easier revocation. The upgrade involved first moving to the latest Hydra 1.x release, then upgrading to 2.x using a blue-green deployment strategy, with planning to minimize user interruption.
Key Points
- Self-managed OAuth now available to all developers, not just manually onboarded partners.
- Upgraded Hydra engine from 1.x to 2.x using a blue-green deployment with custom SQL migrations.
- New consent and revocation UI gives clearer visibility into app permissions and ownership.
Why It Matters
Enables developers to build secure, delegated SaaS integrations on Cloudflare without manual approvals.