FROM ALL-OR-NOTHING TO TASK-BASED OAUTH CONSENT

Summary from the TLDR DevOps newsletter

Cloudflare has added OAuth scope customization, letting users deselect optional permissions on the consent screen rather than facing an all-or-nothing choice. Client owners can now mark specific scopes as optional when configuring an OAuth app, and any access token generated after consent will only contain the scopes the user approved. Cloudflare says it plans to expand its account and zone-level role surface over the next few weeks to cover nearly every Cloudflare product, adding more API token roles, account membership options, and OAuth scopes.