I want to try and make a application using CloudFlare. I can host the frontend app in Pages and Back

I want to try and make a application using CloudFlare. I can host the frontend app in Pages and Backend on Workers but I am trying to find a solution for Authentication.

These are my current choices:

Use a CloudFlare service for Auth if there is one (Couldn't find one) I need one with Sign in With Google, MFA, Sending Forget Email from Own Domain
Implement it using CloudFlare D1 + Worker but writing the code on my own like using the argon2 library and other libraries.

Please advise, I would ideally like to use a pre-built service from CloudFlare

Hhaz I want to try and make a application using CloudFlare. I can host the frontend a...

Hello, I’m Allie!•5/26/24, 12:33 PM

I would probably go with something like https://lucia-auth.com/

Lucia

Lucia documentation

Lucia is an open source auth library that abstracts away the complexity of handling sessions.

Puliczek•5/26/24, 1:05 PM

hello group

I have built cloudflare worker with hono. I would like to add authentication Bearer Auth with usage, for example user can hit only 100k/monthly endpoint. Whats the best way to do that? Should I go with KV or Durable objects to store API Keys + usage? Or is there better way to do that?

Unsmart•5/26/24, 3:00 PM

DO is the only option of those 2 that could be used in that way

UUnsmart DO is the only option of those 2 that could be used in that way

Puliczek•5/26/24, 3:05 PM

Thanks. Can't get why DO is better for that.

Unsmart•5/26/24, 3:06 PM

KV is eventually consistent and can only be written to the same key 1 time per second. DO is strongly consistent and can have hundreds to thousands of hits a second

UUnsmart KV is eventually consistent and can only be written to the same key 1 time per s...

Puliczek•5/26/24, 3:11 PM

Ok now I get that, I need to check latency. I tested KV and its around ~20ms. I wonder how much slower DO is.

HHello, I’m Allie!I would probably go with something like https://lucia-auth.com/

hazOP•5/26/24, 3:58 PM

Thx, but does this work with CloudFlare Workers, has it been tested on CF Workers? Would really appreciate it

Hhaz Thx, but does this work with CloudFlare Workers, has it been tested on CF Worker...

Hello, I’m Allie!•5/26/24, 3:59 PM

I've seen people use it on Workers, so yes

Hello, I’m Allie!•5/26/24, 3:59 PM

Whether everything works, idk. If you do find issues, I would recommend reporting them to the Lucia authors

hazOP•5/26/24, 4:00 PM

Sounds good, will probably need to look into what flags might be required, I'll test and hopefully post my findings here

antonio eldelpan•5/26/24, 4:32 PM

Given that cf workers are limited in cpu time, what is the recommended hashing algorithm to store securely passwords?

hazOP•5/26/24, 5:18 PM

From what I've read, here are the options:

https://developers.cloudflare.com/workers/runtime-apis/web-crypto/
https://developers.cloudflare.com/workers/runtime-apis/nodejs/crypto/
Or something purely written on JS and not a wrapper on top of something like C++ which is basically what Argon2 is. Not sure what Bcrypt uses but that is what is used by Lucua Auth @Puliczek

Cloudflare Docs

Web Crypto · Cloudflare Workers docs

A set of low-level functions for common cryptographic tasks.

Cloudflare Docs

Crypto · Cloudflare Workers docs

To use Node.js APIs in your Worker, add the nodejs_compat compatibility flag to your wrangler.toml file.

johtso•5/26/24, 9:36 PM

Say I want to have a DO that polls an endpoint for new data. I then want to have a worker that allows the user to stream events using SSE, getting a new event every time the DO finds new data. What's the simplest way to connect those two things together? Do I need to have the worker consume a websocket from the DO in order to get updates?

johtso•5/26/24, 9:54 PM

ah, I guess I can have the DO expose SSEs

.gwapes•5/27/24, 12:10 AM

I was looking on the Cloudflare api documentation and I couldn’t find what I was thinking of. When you view the dashboard and click on your worker and you can see the total amount of requests, errors sub requests etc, is it possible to get this info through a request? (Pls ping if you answer)

..gwapes I was looking on the Cloudflare api documentation and I couldn’t find what I was...

Cyb3r-Jak3•5/27/24, 3:00 AM

That would be the GraphQL API
https://developers.cloudflare.com/analytics/graphql-api/#graphql-analytics-api

Cloudflare Docs

GraphQL Analytics API · Cloudflare Analytics docs

The GraphQL Analytics API provides data regarding HTTP requests passing through Cloudflare’s network, as well as data from specific products, such as …

.gwapes•5/27/24, 2:32 PM

Thank you

Kirk Ouimet•5/27/24, 7:03 PM

Hey team - how big are Cloudflare workers? E.g., ballpark how many worker invocations happen per day across all of cloudflare?

Kirk Ouimet•5/27/24, 7:03 PM

Billions?

James•5/27/24, 7:07 PM

More than that. I don't think any official numbers have been published recently, but this tweet is a good example: https://x.com/KentonVarda/status/1783996343813652801

Kenton Varda (@KentonVarda) on X

In case you were still wondering whether Cloudflare Workers can scale to your traffic...

Twitter

•

4/26/24, 11:07 PM

James•5/27/24, 7:07 PM

An internal team dropped 12.5M requests per second on Workers and it worked just fine

Kirk Ouimet•5/27/24, 7:08 PM

WOWOWOW

Kirk Ouimet•5/27/24, 7:08 PM

thats incredible

Chaika•5/27/24, 7:09 PM

A good amount of Cloudflare features are internal workers too: https://blog.cloudflare.com/building-cloudflare-on-cloudflare
Like Zaraz, Cloudflare Challenges, Waiting Room, Image Resizing, Images, Mirage, Rocket Loader, etc. All Cloudflare Pages requests go through a worker too

James•5/27/24, 7:09 PM

All KV requests too, so much.

Chaika•5/27/24, 7:09 PM

It's Workers all the way down lol

James•5/27/24, 7:09 PM

I definitely wouldn't ever have any worries about my traffic scaling beyond Workers, haha

Walshy•5/27/24, 7:30 PM

let me see what number i can give

Walshy•5/27/24, 7:33 PM

eh we don't have public stats to go on

Walshy•5/27/24, 7:33 PM

but yeah, a lot

WWalshy but yeah, a lot

Chaika•5/27/24, 7:33 PM

that's a good number

Walshy•5/27/24, 7:36 PM

not yet, rapid reset was hitting 200 mil rps though

Walshy•5/27/24, 7:36 PM

so i'm sure we'll see a ddos hit that within the next 2 years

Alvee•5/27/24, 10:43 PM

can I use redis inside a worker ? does it support these protocols ?

Jayvi•5/28/24, 6:14 AM

Hello anyone can you please help me I forgot my email which I have used for cloudflare, my domain purchased from godaddy and in name server I have cloudflare name servers, so I want to know my cloudflare email, can you please guide me how to get email