Cloudflare announced OAuth scope customization, allowing developers to mark scopes as optional so users can narrow granted permissions during authorization.

Key Details

• Client owners can mark specific scopes as optional during OAuth client configuration.
• Users can deselect optional scopes on the consent screen to grant a narrower set of permissions.
• Tokens generated after authorization only contain consented scopes.
• Cloudflare plans to expand account and zone-level role surfaces across nearly all products in subsequent weeks.

In This Story