/plushcap/analysis/cloudflare/give-your-automated-services-credentials-with-access-service-tokens

Give your automated services credentials with Access service tokens

What's this blog post about?

Cloudflare has introduced a new feature called "Access Service Tokens" which extends the same level of access control provided by its Cloudflare Access service to automated tools, scripts, and bots. This is achieved through the use of JSON Web Tokens (JWTs) that are generated when a request is made to a site behind Access. When a bot sends a request with unique Client ID and Secret credentials as headers, Cloudflare validates them instead of redirecting to an identity provider. Service tokens can be created within the Access tab of the Cloudflare dashboard, and their usage is demonstrated through a chatbot example that securely accesses data behind Access.

Company
Cloudflare

Date published
Feb. 7, 2019

Author(s)
Sam Rhea

Word count
546

Hacker News points
None found.

Language
English


By Matt Makai. 2021-2024.