Cloudflare introduced new tools enabling Cloudflare Access to be applied directly to Workers, protecting applications by default at the account or individual Worker level.

Key Details

• Access policies can now be set at the account level to protect all Workers by default.
• Access can be applied to a single Worker, covering all its domains and preview URLs automatically.
• Authenticated user identity (email, name, groups) is available in Worker code via ctx.access.getIdentity() without manual JWT validation.
• Workers for Platforms dispatch Workers can be protected with Access, making every deployed Worker private by default.
• The feature was enabled by FL2, Cloudflare's new Rust-based modular proxy, which allowed splitting Workers routing from execution.
• An open-source example of an internal static site deployment platform was released.

In This Story