Cloudflare Access Lets Developers Add Email OTP Auth to Workers Apps for Free

·1 views

A developer secured a personal task management app hosted on Cloudflare Workers by enabling Cloudflare Access, which adds email one-time-password authentication at the network edge before any request reaches the application. The setup requires no changes to application code and is available on Cloudflare's free tier, which supports up to 50 users at no cost. Unlike a traditional login screen, edge-level authentication protects all routes — including static assets, JavaScript bundles, and API endpoints — simultaneously. Configuration is handled entirely through the Cloudflare dashboard by toggling a visibility setting on the workers.dev URL and restricting the Access policy to a specific email address. The developer also noted that preview URLs should be disabled or similarly protected, and that validating the Access JWT inside the Worker itself adds an extra security layer for apps handling sensitive data.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

OpenHands Bug Exposes Gap Between Service Health and Session Liveness in AI Agents

A real incident logged in OpenHands PR #4548 revealed that a browser-tool conversation remained stuck for over eight hours while health-check endpoints continued returning HTTP 200 responses. The root cause was an unbounded shutdown wait in AsyncExecutor.close(), where remaining tasks were never cancelled, leaving the session unable to make progress despite appearing healthy at the service layer. The fix introduces task cancellation and a 10-second timeout on shutdown, explicitly framed as a best-effort safety net rather than a guarantee of clean resource cleanup. A separate multi-agent system called CodeFlowMu surfaced a related but distinct problem: a recovery path could reactivate a worker before the task had completed the lifecycle transition needed for legitimate execution. Both cases illustrate that reliable agent recovery requires verifying at least five separate layers — service health, session liveness, task eligibility, causal prerequisites, and formal acceptance — rather than treating a single healthy status as sufficient to resume work.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Laravel vs Symfony: Key Trade-offs for Enterprise PHP Development

Laravel and Symfony are the two dominant PHP frameworks for enterprise web development, each with distinct strengths shaped by their core philosophies. Laravel, released in 2011, favors convention over configuration, enabling teams to ship software faster with less setup code. Symfony, launched in 2005 by SensioLabs, prioritizes explicit configuration and modularity, giving senior developers granular control over complex systems. Notably, Laravel is built on several Symfony components, meaning both frameworks share foundational concepts around routing, requests, and dependency management. The choice between them ultimately depends less on raw performance benchmarks and more on team experience, project complexity, and delivery timelines.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Details Architecture Behind Reliable AI Transcription App on Cloudflare

A developer has published a technical breakdown of HiTranscript, a web app that converts public video URLs and local media uploads into searchable transcripts and subtitle files. The post focuses not on the transcription model itself but on the engineering patterns required to keep the pipeline reliable under real-world conditions such as large uploads, duplicate callbacks, and partial batch failures. The system uses TanStack Start, TypeScript, PostgreSQL, and Cloudflare Workers, Queues, and R2 for orchestration and storage. Key architectural decisions include explicit multi-state job tracking, storing media in private object storage rather than passing it through HTTP requests, and idempotent callback handlers that prevent duplicate processing. These patterns ensure stale workers cannot overwrite completed tasks and that billing and result persistence occur exactly once even when retries occur.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

ACH Return Code R01: What Developers Must Know About Insufficient Fund Failures

ACH return code R01, triggered when a receiver's bank finds insufficient funds at settlement, is the most common failure in payout systems. Unlike card payment declines, R01 returns occur asynchronously, typically 1–2 business days after the original debit is submitted to the Federal Reserve. Developers must handle these returns via webhooks or API queries and implement retry logic, starting with a resubmission on day three, followed by a delayed attempt on day seven, and user escalation by day fourteen. Each returned transaction carries a processor fee of $0.25 to $1.00, so tracking R01 rates by recipient cohort is advised to manage costs. Receivers with consistently high R01 rates may warrant a switch to real-time payment rails such as RTP or Visa Direct.

0 comments Read more at DEV Community