frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Cloudflare launched self-managed OAuth for all

https://blog.cloudflare.com/oauth-for-all/
57•terryds•2h ago

Comments

gnabgib•2h ago
Title: Unlocking the Cloudflare app ecosystem with OAuth for all
asdf88990•1h ago
Cloudflare turning into a Cloud platform is undoing what it was really doing well: making small clouds and diy hosting manageable in the hostile web environment.

Once their revenue from Cloud services overtakes their core offering, bye bye Cloudflare free and so on.

reed1234•1h ago
I doubt it. It’s cheap to run and a good funnel
weird-eye-issue•18m ago
> Once their revenue from Cloud services overtakes their core offering, bye bye Cloudflare free and so on.

Wait so what do you think their core offering is?

sandeepkd•1h ago
Not sure whats the play here, there is no world where this can turn out good. Cloudflare is more or less infrastructure provider, this idea of some user delegating permissions to their account to some third party client for infrastructure is ripe for abuses. If companies like AWS are not doing it then its for a good reason.
codebje•1h ago
How different is this to, eg, the Google developer program, in which I can create a new OAuth client for Google users?
ok_dad•1h ago
Do you understand what OAuth is? It’s like an API key but less likely to be abused. This is a good thing. It helps security in many ways and makes security flows more safe than carrying around a token.
xyzzy_plugh•55m ago
This is such a weird blog post.

It's full of technical details, but I'm really not sure who they're for. There's nothing particularly novel or impressive. If anything the fact that it took them this long should be embarrassing. They pad it out with a table of stats that are just kind of meh? Congrats I guess for releasing something without burning the house down?

As an on-and-off customer of theirs I tried to quickly skim for some of the details that would impact me, the theoretical end-user, but the vast majority of TFA is just about how they pulled off this apparent feat of engineering.

I'm not trying to be pessimistic, and I don't fault the author (but I question the culture). I honestly don't get who this is for.

For the record this is something they should have had... at least six or seven years ago?

parsadotsh•52m ago
I for one appreciate them sharing this and found it a very interesting read. Many of us don't have experiences at companies at this scale and so it's nice whenever I get to read about what happens behind the scene.
xyzzy_plugh•37m ago
Usually I expect an eng blog post to be a recruitment vehicle, wherein the authors articulate a really hard problem they solved, or some novel approach they took, or the cool new open source project they released (for their future SaaS play).

But this is so mundane it bothers me in a way I find surprising. It's more about how they made some questionable choices in the past and how they finally paid off that technical debt. Is it interesting? Perhaps I am just getting old and jaded.

What I find odd is how light TFA is on actual details as to what it is they shipped.

This is the kind of thing I'd ship internally to the org as part of a weekly update or something, but not what I'd expect on a public-facing corporate blog.

system2•43m ago
I hope Cloudflare does not turn into Google, with so many different things that they will eventually kill all of these services randomly because of the maintenance cost.
zaptheimpaler•25m ago
Oauth and enterprise auth has to be the worst thing ever made, it might be the most confusing and frustrating part of dealing with the cloud. Even the AI tools took a year to just get basic Oauth working on headless systems without assuming you could open a browser. If they're going to go down the auth rabbit hole with RBAC/IAM/Workload identities?/service accounts and all the trash the big cloud providers have, I just hope to god they leave in the simple shit for personal use. I just want a damn API key, I keep it a secret and revoke if necessary and don't need 10000 layers of auth bullshit tangled up in every layer of every platform.
necovek•20m ago
I thought I understood what Oauth was (a standardized protocol to provide per-client access keys), but this article confuses me.

What's a "self-managed" Oauth here? What is access is being granted to, who are the clients, who are the partners...?

Anyone care to elaborate?

Groxx•8m ago
[delayed]

Anthropic says Alibaba illicitly extracted Claude AI model capabilities

https://www.reuters.com/world/china/anthropic-says-alibaba-illicitly-extracted-claude-ai-model-ca...
211•htrp•9h ago•366 comments

OpenAI unveils its first custom chip, built by Broadcom

https://techcrunch.com/2026/06/24/openai-unveils-its-first-custom-chip-built-by-broadcom/
625•jamdesk•11h ago•356 comments

LuaJIT 3.0 proposed syntax extensions

https://github.com/LuaJIT/LuaJIT/issues/1475
101•phreddypharkus•4h ago•57 comments

Cloudflare launched self-managed OAuth for all

https://blog.cloudflare.com/oauth-for-all/
59•terryds•2h ago•16 comments

Blogging can just be stating the obvious

https://blog.jim-nielsen.com/2026/blogging-stating-the-obvious/
130•Curiositry•5h ago•49 comments

Zombie unicorns are haunting Silicon Valley

https://www.economist.com/business/2026/06/21/zombie-unicorns-are-haunting-silicon-valley
34•andsoitis•2h ago•8 comments

Show HN: Write SaaS apps where users control where their data is stored

https://github.com/wolfoo2931/linkedrecords/
25•WolfOliver•5d ago•3 comments

Dostoyevsky isn't difficult

https://www.autodidacts.io/dostoyevsky-isnt-difficult/
89•surprisetalk•2d ago•74 comments

Qualcomm to Acquire Modular

https://www.reuters.com/business/qualcomm-buy-ai-startup-modular-2026-06-24/
176•timmyd•15h ago•44 comments

Mixing Visual and Textual Code

https://arxiv.org/abs/2603.15855
27•doppioandante•3h ago•4 comments

RubyLLM: A Ruby framework for all major AI providers

https://rubyllm.com/
364•doener•14h ago•60 comments

45°C cooling design cuts data center water use to near zero

https://blogs.nvidia.com/blog/liquid-cooling-ai-factories/
253•nitin_flanker•14h ago•172 comments

PR spam today looks like email spam in the early 2000s

https://www.greptile.com/blog/prs-on-openclaw
198•dakshgupta•14h ago•117 comments

Medical students are using popular research tool to pump out misleading studies

https://www.science.org/content/article/medical-students-are-using-popular-research-tool-pump-out...
10•rndsignals•2h ago•3 comments

GLM-5.2 is a step change for open agents

https://www.interconnects.ai/p/glm-52-is-the-step-change-for-open
171•vantareed•2d ago•95 comments

Show HN: Brain Frog – Can you be random enough for 11 lines of JavaScript?

https://brainfrog.lol
16•AlexanderZ•5d ago•18 comments

Computer use in Gemini 3.5 Flash

https://blog.google/innovation-and-ai/models-and-research/gemini-models/introducing-computer-use-...
194•swolpers•11h ago•124 comments

GTA 6 Physical Copies Won't Include a Disc, Will Just Be a Code in a Box

https://www.ign.com/articles/grand-theft-auto-6-physical-copies-wont-include-a-disc-will-just-be-...
25•jmsflknr•1h ago•13 comments

Ending respiratory infections

https://blog.interceptfund.com/p/ending-respiratory-infections
115•EthanFantl•3h ago•48 comments

Matt's Script Archive: The Scripts That Reshaped the Web

https://tedium.co/2026/06/22/matts-script-archive-retrospective/
27•1317•2d ago•9 comments

What I'm Finding About LLM Code Style and Token Costs

https://www.jimmont.com/llm-style-token-costs
20•jimmont•4h ago•7 comments

Ask HN: Where is our profession (programmer) going?

34•syntaxbush•2h ago•30 comments

The Xteink X4 E-Ink Reader

https://blog.omgmog.net/post/xteink-x4-e-ink-reader/
197•felixdoerp•12h ago•120 comments

Optimizing [sqlx:test] rebuild time

https://kobzol.github.io/rust/2026/06/21/optimizing-sqlx-test-rebuild-time.html
6•ibobev•2d ago•0 comments

Bible as RAG Database

https://www.crosscanon.com/
69•jacksonastone•3h ago•39 comments

Exploring the internal representations of Pangram 3.3.2

https://www.pangram.com/pangram-space
17•krackers•3h ago•5 comments

Crawling BitTorrent DHTs for Fun and Profit [pdf]

https://www.usenix.org/legacy/event/woot10/tech/full_papers/Wolchok.pdf
78•dgellow•3d ago•32 comments

Show HN: Nub – A Bun-like all-in-one toolkit for Node.js

https://github.com/nubjs/nub
220•colinmcd•14h ago•63 comments

Writers and Drugs

https://lithub.com/are-writers-intrinsically-vulnerable-to-alcohol-and-drugs/
16•dang•3h ago•8 comments

15 sorting algorithms in 6 minutes (2013) [video]

https://www.youtube.com/watch?v=kPRA0W1kECg
11•akkartik•1d ago•0 comments