Sign inConnect your agent
infochanged

Cloudflare Fundamentals - Optional OAuth scopes

Announced
Tags
Cloudflare-Fundamentals
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-08-20-oauth-optional-scopes/

<p>We're announcing the GA of Optional OAuth Scopes.</p> <p>OAuth client developers can now classify configured scopes as required or optional in the Cloudflare dashboard. By default, all configured scopes remain required .</p> <div tabindex="-1" class="heading-wrapper level-h4"><h4 id="whats-new">What's New</h4><a class="anchor-link" href="#whats-new"><span aria-hidden="true" class="anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24"><path fill="currentcolor" d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 0 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 1 0-1.42-1.42Zm8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 0 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 1 0 1.42 1.42l3.88-3.89a4.49 4.49 0 0 0 0-6.33ZM8.83 15.17a1 1 0 0 0 1.1.22 1 1 0 0 0 .32-.22l4.92-4.92a1 1 0 0 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42Z"></path></svg></span></a></div> <p><strong>Optional Scopes:</strong> OAuth clients can now mark configured scopes as optional, allowing applications to request them without requiring users to approve them.</p> <p><strong>Scope Selection:</strong> On the consent screen, users must grant required scopes but can decline optional scopes. This helps customers apply least-privilege access to applications, CLIs, and workloads. Optional scopes are selected by default.</p> <p><strong>Templates:</strong> The consent screen now includes <strong>Read Only</strong> and <strong>Full Access</strong> templates to make scope selection faster and easier.</p> <p><strong>Search:</strong> Users can now search scopes in the consent screen.</p> <p>Learn how to <a href="https://developers.cloudflare.com/fundamentals/oauth/create-an-oauth-client/#select-scopes">select client scopes</a> and <a href="https://developers.cloudflare.com/fundamentals/oauth/authorizing-an-application/#edit-optional-permissions">edit optional permissions</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.