cloudflare/workers-sdk @cloudflare/workers-auth@0.15.4

on GitHub

Patch Changes

• #16557 30d9f72 Thanks @Kmschr! - Request the user API token management scope when logging in with cf

  Include user-api-tokens.write in cf's default OAuth scopes so users can list and manage their user API tokens, including when they have reached the token creation limit. Existing OAuth sessions need a new login to request the scope.

• #16635 76e18a8 Thanks @dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-01

  Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

• #16525 ed7fb41 Thanks @petebacondarwin! - Validate OAuth error callbacks against the pending login

  All authorization callbacks, including ones without a code or error, now require the matching login state. Unrelated callbacks leave the login running so the authorization page can complete it, and control characters in provider error messages are displayed as escaped text.

• Updated dependencies [76e18a8]:

  • @cloudflare/workers-utils@0.50.2