Optional OAuth scopes now GA
Cloudflare now allows OAuth client developers to mark configured scopes as required or optional, enabling users to selectively grant permissions and apply least-privilege access controls. The consent screen includes new templates and search functionality to make scope selection easier.
We're announcing the GA of Optional OAuth Scopes.
OAuth client developers can now classify configured scopes as required or optional in the Cloudflare dashboard. By default, all configured scopes remain required .
What's New
Optional Scopes: OAuth clients can now mark configured scopes as optional, allowing applications to request them without requiring users to approve them.
Scope Selection: On the consent screen, users must grant required scopes but can decline optional scopes. This helps customers apply least-privilege access to applications, CLIs, and workloads. Optional scopes are selected by default.
Templates: The consent screen now includes Read Only and Full Access templates to make scope selection faster and easier.
Search: Users can now search scopes in the consent screen.
Learn how to select client scopes and edit optional permissions.
Source: original entry ↗