Can I stop `cf-access-client-secret` from being passed to my Worker? - Cloudflare Developers

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

dave

D

daveOP•4/3/25, 2:57 AM

This is probably one of the worst mobile UX I’ve ever seen.

Onatoriu

OOnatoriu i tried selenium + undetected-chromedriver, didn't helped

dave

D

daveOP•4/3/25, 3:02 AM

Why are you even doing this? Microsoft Azure offers free DeepSeek access.

dave

Ddave This is probably one of the worst mobile UX I’ve ever seen.

MattIPv4

M

MattIPv4•4/3/25, 3:13 AM

Oh Salesforce

dave

Ddave Why are you even doing this? Microsoft Azure offers free DeepSeek access.

Onatoriu

O

Onatoriu•4/3/25, 3:16 AM

thats cool but i hear "microsoft azure" first in my life)

Onatoriu

OOnatoriu 😸 thats cool but i hear "microsoft azure" first in my life)

dave

D

daveOP•4/3/25, 3:16 AM

It’s the second largest cloud provider in the world.

dave

Ddave Can I stop `cf-access-client-secret` from being passed to my Worker?

dave

D

daveOP•4/3/25, 4:27 AM

Oh,

cf-access-client-secret

cf-access-client-secret

wasn't supposed to be exposed in the first place. I had a race condition somewhere I think, where I added the token before the rule.

dave

D

daveOP•4/3/25, 4:28 AM

I only see cf-access-jwt-assertioncf-access-jwt-assertion now

Yash

Y

Yash•4/3/25, 5:17 AM

Why doesn't Cloudflare offer direct application deployment from Docker images?

𝗢𝗥𝗔𝗖𝗟𝗘-𝗗𝗖.Vx ◈

�

𝗢𝗥𝗔𝗖𝗟𝗘-𝗗𝗖.Vx ◈•4/3/25, 1:26 PM

Heyy anyone mod online?

rdm

R

rdm•4/3/25, 1:27 PM

Don't ask to ask, just ask

SuperHelpflare

S

SuperHelpflare•4/3/25, 1:28 PM

https://dontasktoask.com/

Don't ask to ask, just ask

rdm

R

rdm•4/3/25, 1:34 PM

dangit, I was close

oof2win2

O

oof2win2•4/3/25, 3:08 PM

isn't it cf dev week this week? i don't see anything getting published or i might just not see it

A

an•4/3/25, 5:30 PM

https://blog.cloudflare.com/improve-your-media-pipelines-with-the-images-binding-for-cloudflare-workers/ really love cloudflare image but my use cases is for converting dynamic image from user to other format. Users might have up to 1000 new unique image in 1 hour. Does cloudflare image have plan to support this like use case? 0.50$ per 1k seems huge

The Cloudflare Blog

Improve your media pipelines with the Images binding for Cloudflare...

Media-rich applications require image and video pipelines that integrate seamlessly with the rest of your technology stack. Here’s how the Images binding enables you to build more flexible, programmatic workflows.

A

an•4/3/25, 5:34 PM

similar to this https://developers.cloudflare.com/images/examples/transcode-from-workers-ai/

Cloudflare Docs

Transcode images · Cloudflare Images docs

Transcode an image from Workers AI before uploading to R2

dave

D

daveOP•4/3/25, 7:18 PM

Will this enforce Google Workspace as the login method, or will it only enforce the email address?

dave

D

daveOP•4/3/25, 7:19 PM

I can't create a policy without at least one include rule.

dave

D

daveOP•4/3/25, 7:19 PM

(I wanted to do two require rules, but that's not allowed.)

dave

Ddave Will this enforce Google Workspace as the login method, or will it only enforce ...

Erisa

E

Erisa•4/3/25, 7:27 PM

yes, it will allow example@example.com to connect, and only using Google Workspace
thats exactly the kind of use-case that the include/require distinction exists for

dave

D

daveOP•4/3/25, 7:34 PM

Can I do double subdomain wildcards in Access?

I want to protect everything like 12345a6c.demo.pages.dev12345a6c.demo.pages.dev, 12345a6c.demo2.pages.dev12345a6c.demo2.pages.dev, demo.pages.devdemo.pages.dev , 12345a6c.demo2.pages.dev12345a6c.demo2.pages.dev , demo2.pages.devdemo2.pages.dev, etc.

Erisa

E

Erisa•4/3/25, 7:38 PM

.pages.dev are special-cased as being treated as a single "domain" so you can just enter * as the subdomain and demo.pages.dev as the domain

Erisa

E

Erisa•4/3/25, 7:39 PM

this is not technically wrong since pages.dev is on the public suffix list

Erisa

EErisa .pages.dev are special-cased as being treated as a single "domain" so you can ju...

dave

D

daveOP•4/3/25, 7:39 PM

So this will match 12345a6c.demo.pages.dev12345a6c.demo.pages.dev?

Erisa

E

Erisa•4/3/25, 7:40 PM

youd do *.demo.pages.dev and *.demo2.pages.dev separately i'd think, but also hmm i've not seen that specific ui before i wonder if its new

Erisa

EErisa youd do \*.demo.pages.dev and *.demo2.pages.dev separately i'd think, but also h...

dave

D

daveOP•4/3/25, 7:41 PM

ouuuf, so for all new pages.dev projects, I would need to manually add a new subdomain?

Erisa

E

Erisa•4/3/25, 7:41 PM

well that used to be the case but im not so sure with this new interface if thats still a restriction

Erisa

E

Erisa•4/3/25, 7:42 PM

I would say try it and see!

Erisa

EErisa youd do \*.demo.pages.dev and *.demo2.pages.dev separately i'd think, but also h...

Isaac McFadyen

I

Isaac McFadyen•4/3/25, 7:42 PM

It's new, the customcustom dropdown just lets you choose between free-text and the domain picker from before

Erisa

E

Erisa•4/3/25, 7:42 PM

cool

Isaac McFadyen

I

Isaac McFadyen•4/3/25, 7:42 PM

It replaced the old method of only being able to pick from the dropdown

dave

D

daveOP•4/3/25, 7:44 PM

kk trying this first, then pages

dave

D

daveOP•4/3/25, 7:49 PM

*.workers.dev*.workers.dev is a no-no

Original message was deleted

dave

D

daveOP•4/3/25, 7:53 PM

thanks! I figured out that this is the correct way to protect all workers.dev stuff.

dave

Ddave thanks! I figured out that this is the correct way to protect all workers.dev st...

dave

D

daveOP•4/3/25, 7:56 PM

@FloppyDisk This won't impact Cron Workers or any service bindings, right?

dave

D

daveOP•4/3/25, 7:59 PM

seems to be working

dave

D

daveOP•4/3/25, 8:00 PM

ya no impact

Erisa

EErisa .pages.dev are special-cased as being treated as a single "domain" so you can ju...

dave

D

daveOP•4/3/25, 8:03 PM

Can't use *.pages.dev*.pages.dev.

Erisa

E

Erisa•4/3/25, 8:04 PM

mmmm that makes sense but also sucks

Erisa

EErisa .pages.dev are special-cased as being treated as a single "domain" so you can ju...

dave

D

daveOP•4/3/25, 8:10 PM

It looks like I need two hostnames for each project. One for *.demo.pages.dev*.demo.pages.dev and one for demo.pages.devdemo.pages.dev.

dave

D

daveOP•4/3/25, 8:10 PM

Just doing *.demo.pages.dev*.demo.pages.dev doesn't match demo.pages.devdemo.pages.dev.

Erisa

E

Erisa•4/3/25, 8:13 PM

hmmm yes, youre right

dave

D

daveOP•4/3/25, 8:14 PM

hold on, I think I might be able to do this with a redirect trick on the account level

dave

D

daveOP•4/3/25, 8:15 PM

https://developers.cloudflare.com/rules/url-forwarding/bulk-redirects/concepts/#url-redirects

dave

D

daveOP•4/3/25, 8:15 PM

darn it

dave

D

daveOP•4/3/25, 8:20 PM

With this configuration and Includes subdomains enabled, incoming requests to http://a.example.com/about and http://a.b.example.com/about would also match, in addition to the specified domain with no subdomain (https://example.com/about).

dave

D

daveOP•4/3/25, 8:24 PM

ah ha!!

dave

D

daveOP•4/3/25, 8:24 PM

It worked!

dave

D

daveOP•4/3/25, 8:24 PM

This bulk redirect list rule effectively "blocks" all usage of pages.devpages.dev from what I can tell.

dave

Ddave This bulk redirect list rule effectively "blocks" all usage of `pages.dev` from ...

dave

D

daveOP•4/3/25, 8:28 PM

https://github.com/cloudflare/cloudflare-docs/issues/14839

Also documented here.

GitHub

Please document how to redirect all `*.pages.dev` domains in accoun...

Existing documentation URL(s) https://developers.cloudflare.com/pages/how-to/redirect-to-custom-domain/ What changes are you suggesting? I found a really nice trick for redirecting (effectively dis...

harryphilip1275

H

harryphilip1275•4/3/25, 8:54 PM

As soon as I change over to cloudflare and assign there name servers, my website stops working and has a message that says too many redirects, how do I fix that ?