my recommendation is always the latter, you shouldn't expose Cloudflare API tokens directly to users

my recommendation is always the latter, you shouldn't expose Cloudflare API tokens directly to users and instead maybe create your own (maybe by using auth providers, like clerk and so on) - so that you can also have proper validation in your endpoints too
Was this page helpful?