返回全部动态
Cloudflare 新增可选 OAuth 作用域，优化代理授权粒度
原标题：Cloudflare Adds Optional OAuth Scopes, Letting Developers Mark What Users May Decline
AI 摘要
Cloudflare 推出了可选 OAuth 作用域，允许用户在授权屏幕上取消选择单个权限，而开发者可标记哪些作用域可被放弃。此举主要针对 MCP 服务器等代理场景，避免代理请求过多权限。该功能不改变 OAuth 协议，但要求应用检查令牌中的实际作用域并优雅降级。
以上摘要由 AI 生成，可能存在误差。事实请以原文为准。
正文节选
Cloudflare has added optional OAuth scopes, letting users deselect individual permissions on the consent screen instead of approving or denying an application's full request. Client owners mark which scopes may be dropped, and the company names MCP servers as the motivating case. The problem it targets is specific to agents. An application built around a handful of scopes can describe its access needs on a consent screen, and a user can reasonably judge them. An agent cannot. As Cloudflare puts
发布时间：2026-09-02 17:07
抓取时间：2026-09-02 18:05
来源机构：InfoQ