Cloudflare Developers•3y ago

IMO they just need to change the pricing model for Access for SaaS.

Ddave IMO they just need to change the pricing model for Access for SaaS.

Old Man Maker•7/3/23, 6:09 PM

Firebase?

OOld Man Maker Firebase?

daveOP•7/3/23, 6:10 PM

Cloudflare Access

Old Man Maker•7/3/23, 6:11 PM

Fair enough. I've not looked into it to be able to comment. Thus far I've found CF pricing pretty compelling in most areas. Is it out of alignment with industry pricing or just generally expensive?

Old Man Maker•7/3/23, 6:13 PM

That's interesting @Leo

OOld Man Maker hey guys - just in case I am missing something - does CF have a solution for Aut...

aaaaaaaaaaaaaaaaa•7/4/23, 10:38 AM

I’ve used Azure AD B2C/Auth0 before as a CIAM.

aaaaaaaaaaaaaaaaa•7/4/23, 10:39 AM

Pre-warning Microsoft are merging Azure AD B2C with another product at the moment… plus you need to understand Microsoft’s proprietary XML framework to build custom identity solutions like Passwordless login, etc.

OOld Man Maker Thanks @dave | ai.moda - I've build several out over the years, but mostly runni...

daveOP•7/4/23, 3:26 PM

if you don’t care about needing to revoke a session, you don’t need anything persistent on the server side. JWT in a cookie works.

daveOP•7/4/23, 3:28 PM

We use https://github.com/panva/oauth4webapi

GitHub

GitHub - panva/oauth4webapi: OAuth 2 / OpenID Connect for JavaScrip...

OAuth 2 / OpenID Connect for JavaScript Runtimes. Contribute to panva/oauth4webapi development by creating an account on GitHub.

Ddave We use https://github.com/panva/oauth4webapi

Hello, I’m Allie!•7/4/23, 3:30 PM

Isn’t that client-only?

Hello, I’m Allie!•7/4/23, 3:30 PM

Or am I missing something…

HHello, I’m Allie!Isn’t that client-only?

daveOP•7/4/23, 3:31 PM

We use it a ton in a Worker.

Ddave We use it a ton in a Worker.

Hello, I’m Allie!•7/4/23, 3:32 PM

No, I mean that it can consume OAuth/OiDC, but it can’t be a server

Hello, I’m Allie!•7/4/23, 3:32 PM

Whether in a Worker or not

HHello, I’m Allie!No, I mean that it can **consume** OAuth/OiDC, but it can’t be a server

daveOP•7/4/23, 3:33 PM

Ahhhh yes, sorry. I started to implement my own OAuth 2.0 server for Google Assistant, but temporarily abandoned it after realizing Google sunset the functionality we wanted.

F0rce•7/4/23, 4:43 PM

can I ask a question about Cloudflare Zero Trust (especially Access) in here ?

Erisa•7/4/23, 4:44 PM

yes: here, #general-help or https://community.cloudflare.com all are fine

F0rce•7/4/23, 4:45 PM

ok I want to secure our staging API with Cloudflare Access. I thought that the Service Token is the exact correct way to do so. Only if the Client-ID & Client-Secret are present (and valid) the API request should go through. But I always get redirected to the Login Page, where the API calls are not doing anything...

Erisa•7/4/23, 4:53 PM

you need to set the action for the policy to Service Token rather than Allow

Erisa•7/4/23, 4:53 PM

if you haven't already

Smarter•7/4/23, 5:10 PM

Is there a Discord channel for Cloudflared/Tunnels where discussions would be appropriate?

James•7/4/23, 5:11 PM

There's not, but you're free to ask here, #general-help, or https://community.cloudflare.com/. The ZT team hang out more directly on the forum rather than Discord, but there's a tonne of smart community folks here who'd be happy to help

daveOP•7/4/23, 5:11 PM

Is it possible to use CF email routing/forwarding with DMARC management?

EErisa you need to set the action for the policy to Service Token rather than Allow

F0rce•7/4/23, 5:14 PM

ahhhh thats what I completely missed. I had it on allow. Thank you very much

Ddave Is it possible to use CF email routing/forwarding with DMARC management?

daveOP•7/4/23, 5:15 PM

Doesn’t seem like I can verify the destination address.

SShayan Question about caching, say I have a subdomain on my domain (a.example.com) prox...

Unsmart•7/4/23, 9:44 PM

You can use cache rules on the a.example.com zone that target b.domain.com but you wouldn’t be able to create the cache rules on the b.domain.com zone unless you turned on the proxy

daveOP•7/4/23, 11:46 PM

What API token permissions do I need for this? https://developers.cloudflare.com/api/operations/email-routing-settings-enable-email-routing

Cloudflare API Documentation

Interact with Cloudflare's products and services via the Cloudflare API

daveOP•7/4/23, 11:47 PM

Zone Settings

Zone Settings

Edit

Edit

Ddave What API token permissions do I need for this? https://developers.cloudflare.com...

Cyb3r-Jak3•7/4/23, 11:57 PM

Account:Email Routing:Edit

Account:Email Routing:Edit

CCyb3r-Jak3 `Account:Email Routing:Edit`

daveOP•7/4/23, 11:58 PM

isn't that even more permission than zone settings?

Ddave isn't that even more permission than zone settings?

Cyb3r-Jak3•7/5/23, 12:01 AM

Oh sorry you are using routing rules not addresses.

Zone:Email Routing Rules:Edit

Zone:Email Routing Rules:Edit

CCyb3r-Jak3 Oh sorry you are using routing rules not addresses. `Zone:Email Routing Rules:Ed...

daveOP•7/5/23, 12:12 AM

yeah that's what I had initially, not enough to enable it oddly

daveOP•7/5/23, 12:13 AM

you can add rules with just that permission, but not enable it

daveOP•7/5/23, 1:50 AM

Is there a proper team to ask bout API token permissions?

daveOP•7/5/23, 1:50 AM

the docs seem.. wrong?

daveOP•7/5/23, 1:50 AM

https://developers.cloudflare.com/rules/url-forwarding/single-redirects/create-api/

daveOP•7/5/23, 1:59 AM

figured it out by brute force, you need the transform permission too at the zone level

NothingBad•7/5/23, 5:24 AM

I'm building a Saas app that use Spectrum(tcp), worker for platform. These requires enterprise so I contact sales. Holy, I need pay 3000$-5000$ in order to use that two feature. The sales say with enterprise plan you get bla bla bla, but I don't need a lot other stuff. Should I just look up other alternatives?

NNothingBad I'm building a Saas app that use Spectrum(tcp), worker for platform. These requi...

Hello, I’m Allie!•7/5/23, 5:26 AM

IIRC, the team is working on opening WfP to non-Ent at some point, so that's something

Hello, I’m Allie!•7/5/23, 5:26 AM

Though I wouldn't expect that Spectrum will go non-Ent for a more reasonable price in the near future

Hello, I’m Allie!•7/5/23, 5:26 AM

So if that is a hard requirement, then might want to look somewhere else, at least for that

HHello, I’m Allie!So if that is a hard requirement, then might want to look somewhere else, at lea...

NothingBad•7/5/23, 5:31 AM

DDos protection and layer4 balance(with anycast ip) is the hard requirement, but I feel it doesn't worth pay 3000$ just for use the service

NNothingBad I'm building a Saas app that use Spectrum(tcp), worker for platform. These requi...

jb•7/5/23, 5:32 AM

there is no such thing as "just spectrum" (for better or worse). it's a part of an offering that requires a bunch of other products/services to work as well.

jb•7/5/23, 5:32 AM

the model isn't great for one off usage, as you've found here, but there are alot of other factors that come into play with it.

IMO they just need to change the pricing model for Access for SaaS.

Similar Threads

Similar Threads

Similar Threads