4 articles tagged
Cloudflare turned on Authorization header scanning for every zone with leaked credentials detection enabled, with no configuration change and no update to the page that documents it since 5 May 2026.
On 20 August 2026 Cloudflare let users deselect optional scopes at consent. RFC 6749 has permitted narrower grants since 2012, and most OAuth clients still assume the full requested set was approved.
Choosing an API development company is a bet on three decisions: how you version, what each request costs, and how you signal deprecation. Here is what the 2026 primary sources say.
Precursor is Cloudflare's continuous, session-level bot detection for Enterprise Bot Management, live since July 13, 2026. Turnstile is the free challenge widget. This guide shows which to switch on, and when to run
