hey guys - just in case I am missing something - does CF have a solution for Authentication, such as

hey guys - just in case I am missing something - does CF have a solution for Authentication, such as email/pwd and or social accounts?

kian•7/3/23, 3:07 PM

Not really - Access exists but it's made for internal use (i.e employees)

Old Man MakerOP•7/3/23, 4:58 PM

thanks @kiannh & @mattrobb

Rick•7/3/23, 5:11 PM

probably a weird question;
I want to use D1 for my apps db. I was wondering there are any benefits/cons to keeping my posts table in one db and the users table in another?
I want to optimize for space used in each db.

Walshy•7/3/23, 5:32 PM

Space should be the same regardless of what you do

Walshy•7/3/23, 5:32 PM

Either way content takes up what it takes up.

Walshy•7/3/23, 5:33 PM

I'd personally keep them in 1 DB but obviously different tables.

Totally up to you though on what you do

OOld Man Maker hey guys - just in case I am missing something - does CF have a solution for Aut...

dave•7/3/23, 6:03 PM

We ended up making our own after being sketched out by Supabase’s questionable implementations/lack of hardening.

Old Man MakerOP•7/3/23, 6:08 PM

Thanks @dave | ai.moda - I've build several out over the years, but mostly running on Azure with DB backend. The cost is pure crazy when you add up identity servers and all the rest of it. Although I've never used it, Firebase looks to be the most cost effective solution I've found with a backing store, JWT token support along with change events etc. I was hoping it was just something else the CF had built out, so I could keep it all together with the app. All good though - I'm sure it's in the works somewhere, it certainly would be a welcome service if they could keep the costs managed as well.

OOld Man Maker Thanks @dave | ai.moda - I've build several out over the years, but mostly runni...

dave•7/3/23, 6:09 PM

IMO they just need to change the pricing model for Access for SaaS.

Ddave IMO they just need to change the pricing model for Access for SaaS.

Old Man MakerOP•7/3/23, 6:09 PM

Firebase?

OOld Man Maker Firebase?

dave•7/3/23, 6:10 PM

Cloudflare Access

Old Man MakerOP•7/3/23, 6:11 PM

Fair enough. I've not looked into it to be able to comment. Thus far I've found CF pricing pretty compelling in most areas. Is it out of alignment with industry pricing or just generally expensive?

Old Man MakerOP•7/3/23, 6:13 PM

That's interesting @Leo

OOld Man Maker hey guys - just in case I am missing something - does CF have a solution for Aut...

aaaaaaaaaaaaaaaaa•7/4/23, 10:38 AM

I’ve used Azure AD B2C/Auth0 before as a CIAM.

aaaaaaaaaaaaaaaaa•7/4/23, 10:39 AM

Pre-warning Microsoft are merging Azure AD B2C with another product at the moment… plus you need to understand Microsoft’s proprietary XML framework to build custom identity solutions like Passwordless login, etc.

OOld Man Maker Thanks @dave | ai.moda - I've build several out over the years, but mostly runni...

dave•7/4/23, 3:26 PM

if you don’t care about needing to revoke a session, you don’t need anything persistent on the server side. JWT in a cookie works.

dave•7/4/23, 3:28 PM

We use https://github.com/panva/oauth4webapi

GitHub

GitHub - panva/oauth4webapi: OAuth 2 / OpenID Connect for JavaScrip...

OAuth 2 / OpenID Connect for JavaScript Runtimes. Contribute to panva/oauth4webapi development by creating an account on GitHub.

Ddave We use https://github.com/panva/oauth4webapi

Hello, I’m Allie!•7/4/23, 3:30 PM

Isn’t that client-only?

Hello, I’m Allie!•7/4/23, 3:30 PM

Or am I missing something…

HHello, I’m Allie!Isn’t that client-only?

dave•7/4/23, 3:31 PM

We use it a ton in a Worker.

Ddave We use it a ton in a Worker.

Hello, I’m Allie!•7/4/23, 3:32 PM

No, I mean that it can consume OAuth/OiDC, but it can’t be a server

Hello, I’m Allie!•7/4/23, 3:32 PM

Whether in a Worker or not

HHello, I’m Allie!No, I mean that it can **consume** OAuth/OiDC, but it can’t be a server

dave•7/4/23, 3:33 PM

Ahhhh yes, sorry. I started to implement my own OAuth 2.0 server for Google Assistant, but temporarily abandoned it after realizing Google sunset the functionality we wanted.

F0rce•7/4/23, 4:43 PM

can I ask a question about Cloudflare Zero Trust (especially Access) in here ?

Erisa•7/4/23, 4:44 PM

yes: here, #general-help or https://community.cloudflare.com all are fine

F0rce•7/4/23, 4:45 PM

ok I want to secure our staging API with Cloudflare Access. I thought that the Service Token is the exact correct way to do so. Only if the Client-ID & Client-Secret are present (and valid) the API request should go through. But I always get redirected to the Login Page, where the API calls are not doing anything...

Erisa•7/4/23, 4:53 PM

you need to set the action for the policy to Service Token rather than Allow

Erisa•7/4/23, 4:53 PM

if you haven't already

Smarter•7/4/23, 5:10 PM

Is there a Discord channel for Cloudflared/Tunnels where discussions would be appropriate?

James•7/4/23, 5:11 PM

There's not, but you're free to ask here, #general-help, or https://community.cloudflare.com/. The ZT team hang out more directly on the forum rather than Discord, but there's a tonne of smart community folks here who'd be happy to help

dave•7/4/23, 5:11 PM

Is it possible to use CF email routing/forwarding with DMARC management?

EErisa you need to set the action for the policy to Service Token rather than Allow

F0rce•7/4/23, 5:14 PM

ahhhh thats what I completely missed. I had it on allow. Thank you very much

Ddave Is it possible to use CF email routing/forwarding with DMARC management?

dave•7/4/23, 5:15 PM

Doesn’t seem like I can verify the destination address.

SShayan Question about caching, say I have a subdomain on my domain (a.example.com) prox...

Unsmart•7/4/23, 9:44 PM

You can use cache rules on the a.example.com zone that target b.domain.com but you wouldn’t be able to create the cache rules on the b.domain.com zone unless you turned on the proxy

dave•7/4/23, 11:46 PM

What API token permissions do I need for this? https://developers.cloudflare.com/api/operations/email-routing-settings-enable-email-routing

Cloudflare API Documentation

Interact with Cloudflare's products and services via the Cloudflare API

dave•7/4/23, 11:47 PM