CLOUDFLARE has introduced OAuth scope customization, allowing developers to mark certain scopes as optional during OAuth client setup. This feature enables users to selectively grant permissions on the consent screen, enhancing security while providing greater control over authorization. Key points include:
1. OAuth facilitates delegated access without full credential sharing.
2. Clients can categorize scopes as required or optional, enabling users to opt out of less critical ones during consent.
3. The consent screen remains focused on the current authorization request, preventing user overwhelm.
4. Developers must check the granted scopes after authorization, as only approved scopes will be included in the access token.
5. This rollout aims to create a more flexible and trustworthy consent experience on Cloudflare.