Cloudflare OAuth / Apps
I think this isn't possible, but it seems there's no way to authenticate an app with Cloudflare via OAuth. i.e. scoped permission so I could fetch request logs for our client(s)'s site. I'm not sure if this was part of the defunct Cloudflare Apps experience or whether there was something different.
I'd really appreciate knowing if this is not possible with the current state of things, or if there's any way of doing this that I've overlooked. (I know Wrangler auths via OAuth, but that'll be an internal integration)
6 Replies
I am wondering the same. I know there are apps that get permissions to users' Cloudflare accounts via OAuth. Check https://www.entri.com/resources/instant-demos (click launch demo button).
Entri - The API for Custom Domains
Entri is the API for custom domains. We make it easy for your application to connect, secure, sell, and power custom domains.
If it will help anyone from Cloudflare team, entri.com uses this type of link to start the authorization flow in their app and add a demo DNS record:
https://dash.cloudflare.com/domainconnect/v2/domainTemplates/providers/goentri.com/services/setup-dns-records/apply?domain=[redacted]&groupId=one-record-group&g1r1type=TXT&g1r1host=entri&g1r1data=entri-sample-txt-record&g1r1ttl=300&redirect_uri=https%3A%2F%2Fapp.goentri.com%2Fdccallback%2Fprod%2FSG5gqerBiYcCF7A%3D%3Flocale%3Den&sig=ZCugv0K4FdsoOrWM5lamVXfLlJNOBSWH3%2FRX6%2FPIkbCF1m6FxdtIs3OEx28pLrSCuKPqT6Cb35bOvjL0378JnVXCgwxjdFq3MzSqMrioeI9TwNDqdvLA%2FP722vN5LvXRGrTMcqo3TKq%2Fmn3EZ0cJmwVoA%2BglvWYVrT3KXMvslJ9SM4HTlMznkEYY2s%2FhLECpTt9rbw0CuSDtm%2By%2BAEZXqGJ7i1mtgNybmwVeCQFggyTV%2BdfiN%2BGrAlBkwb2Ue10kwltDD8Zg2Rd9641bRyd%2FyzWr%2BiazBpfxHh09yW6pkc0pL8hrdRA2sAYvuksvw55xIjTqnjC%2FATn2CWMn%2B8bJnA%3D%3D&key=_dcpubkeyv1
I potentially answered my own question now:
Look into: https://www.domainconnect.org/
Ah
@Paul Wong-Gibbs Just curious—did you implement OAuth with Cloudflare? I’m interested in something similar to allow users to create a CNAME and TXT record on their behalf.
It’s not possible unless somethings changed in the months since - I haven’t heard anything.
Thanks for the quick response @Paul Wong-Gibbs!