Cloudflare launched self-managed OAuth for all

Cloudflare has launched self-managed OAuth for all customers, enabling developers to create their own OAuth clients for delegated access to the Cloudflare API instead of relying on harder-to-manage API tokens. The company upgraded its underlying OAuth infrastructure from an open-source Hydra engine to support this expansion while implementing improved security features including clearer consent experiences, easier revocation controls, and protections against OAuth phishing attacks. These upgrades were carefully planned and executed with custom SQL migrations to minimize user disruption while scaling the platform securely.