Top
Best
New

Posted by terryds 14 hours ago

Cloudflare launched self-managed OAuth for all(blog.cloudflare.com)
302 points | 133 commentspage 2
Avery29 9 hours ago|
OAuth is great when you actually need user delegation. For simple server-to-server API access, scoped keys with rotation, audit logs, and fast revocation are often a much better developer experience.
kjgkjhfkjf 8 hours ago||
I wish Cloudflare provided a paved path for user auth.

Better Auth seems to be the most common recommendation for Typescript applications, but there currently doesn't seem to be an official integration with Workers either from Better Auth or from Cloudflare.

I currently use Supabase to avoid having to set up my own user auth on Workers, but I would much prefer to use D1 etc.

notpushkin 7 hours ago||
As much as I’d like to love Better Auth, the assumptions they make sometimes are so damn annoying. Having to resort to hacks to e.g. support an OIDC provider that doesn’t return user’s email (like Telegram) is a PITA.

I find Lucia Auth’s approach more useful in the long run – you have some boilerplate living on your codebase but you own it completely and it doesn’t try to make decisions for you: https://lucia-auth.com/

---

That said, why don’t you use Better Auth with Drizzle and the D1 adapter?

sarreph 8 hours ago||
I’ve done it in one of my projects here using Drizzle, and it’s worked fine in testing so far.

https://github.com/rorz/manual.email/blob/main/packages/db/s...

Exoristos 11 hours ago||
You'd think implementing OAuth2 were splitting the atom the way so many dev teams won't even consider rolling their own or using the multiple well-tested free libraries.
miguelspizza 9 hours ago||
What’s ironic about this is they technically already shipped a looser version. The entire cf api is exposed as an MCP server which supports OAuth and dynamic client registration.

Not sure why they don’t just support DCR or CIMD for this too

khalic 5 hours ago||
Can't wait to have half the internet's auth sessions die because of an outage
asdf88990 13 hours ago||
Cloudflare turning into a Cloud platform is undoing what it was really doing well: making small clouds and diy hosting manageable in the hostile web environment.

Once their revenue from Cloud services overtakes their core offering, bye bye Cloudflare free and so on.

rozenmd 12 hours ago||
Cloudflare free is the business model: https://blog.cloudflare.com/cloudflares-commitment-to-free/
asdfsa32 11 hours ago||
If you carefully read the article, it just explain how it is an economic decision, and one which sooner or later will be no longer the case once they can capitalise on with anything above free, which is the lowest of the lowest bars.

But even to entertain this is crazy, not because of decades of history of capitalist and market enterprise in general, but very specific cases of Technology Companies starting with these kind of feel good ideas and declaring "Don't be evil" or things like " access, safety, and shared prosperity" as their core ideals, turn into absolute panopticon and collaborate with unjust killing of women and children in less than a decade.

The market isn't for free.

reed1234 13 hours ago|||
I doubt it. It’s cheap to run and a good funnel
weird-eye-issue 12 hours ago|||
> Once their revenue from Cloud services overtakes their core offering, bye bye Cloudflare free and so on.

Wait so what do you think their core offering is?

kordlessagain 11 hours ago|||
Man-in-the-middle everything.
asdfsa32 12 hours ago|||
DDoS Protection?
weird-eye-issue 3 hours ago|||
By proxying through their Cloud?
3997531578 11 hours ago|||
[dead]
NicoJuicy 10 hours ago||
You don't know Cloudflare?

Their first products were production grade examples of the SDN that required a lot of bandwidth (DDOS/CDN).

The cloud is a logical continuation.

Their business was always the "internet", see their ticker => NET.

Dev free is part of the marketing cost and would stay under the current leadership.

fithisux 10 hours ago||
Cloudflare to cut about 20% of its workforce

https://news.ycombinator.com/item?id=48054423

gnabgib 14 hours ago||
Title: Unlocking the Cloudflare app ecosystem with OAuth for all
rcarmo 10 hours ago||
Nice, but as usual if you want a 3-step “getting started” example you have to wade through the docs, and even then…
s_kazmi 6 hours ago|
I have shifted all my apps backend as much as possible to cloudflare. Get my domains from it, all security stuff. hosting, etc

Love em., greatest tech company of all time. One stop shop.

More comments...