Secure all internal applications with one click

As the speed of application development through AI increases, the risk of unintentionally exposing internal data or work products to the public internet is growing. To address this, Cloudflare has launched new tools to easily and quickly protect Workers applications.

Now, Cloudflare Access can be applied directly to individual Workers or entire accounts. This allows developers to manage applications so that they are placed behind enterprise login by default, without having to configure each one individually.

Key features include:

• Account-level policy configuration: Configure all preview and production deployments to be behind enterprise login by default.
• Single application policy: Enforce authentication across all connected domains for specific applications.
• User identity information provision: Directly view authenticated user email, name, and group information in code without JWT (JSON Web Token) verification.

When Access on Workers is enabled, Cloudflare enforces authentication before requests reach the application code. This applies equally through any route, including custom domains, routes, workers.dev subdomains, and preview URLs.

Developers can easily obtain user information through the Worker context object (ctx). Calling ctx.access.getIdentity() immediately retrieves metadata for the authenticated user, eliminating the need for separate token parsing or signature verification processes.