OAuth Doesn't Have to Be All-or-Nothing Anymore: Pick the Accounts You Authorize!

Hey there, it's me, Shiichan! Today I'm sharing a bit of news that makes Cloudflare's OAuth flow much nicer to live with. It's a quiet update, but a welcome one for keeping your accounts safe.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Cloudflare Fundamentals improved the OAuth consent and management experience, as announced on the Cloudflare Changelog.

OAuth is the mechanism that lets third-party apps act on your behalf against your Cloudflare account — like when Wrangler deploys Workers or a monitoring tool reads your analytics. With this update, you get fine-grained control over which accounts an app can reach, and you can revoke that access at any time.

The story so far

Until now, authorizing an OAuth app meant handing over access to all of your accounts at once. Handy, but a bit blunt — the app could see accounts it never actually needed.

What changes

From now on, when you authorize an app you can select the accounts it can access one by one. For trusted tools like Wrangler, an "All accounts" option is still there, so you can mix and match.

The consent screen is clearer too: it now shows what the app can access, who created it, and which accounts you're about to authorize.

Dive Deep

You manage authorized apps right from your profile. Head to Profile → Access Management → Connected Applications to see every app with access, review its permissions and target accounts, and revoke it in one click when you no longer need it.

Because you can scope access to only the accounts that matter, you shrink the blast radius if something ever goes wrong. For more background, you can read Cloudflare's blog post.

Wrap-up

• You can now pick which accounts an OAuth app can access, one by one
• The consent screen shows what, who, and which accounts you're authorizing
• Authorized apps can be revoked anytime from Connected Applications
• An "All accounts" option remains for trusted tools

This is a quietly effective security update for anyone running Cloudflare across multiple accounts, or any developer who tends to hand out access to external tools.