Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@ pcx_content_type: reference
title: Application token
sidebar:
order: 2
description: Learn how Cloudflare Access uses application tokens to secure your origin. Understand JWT structure and payloads.
---

Cloudflare Access includes the application token with all authenticated requests to your origin. A typical JWT looks like this:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
pcx_content_type: concept
title: Authorization cookie
description: Learn how Cloudflare Access uses CF_Authorization cookies to secure self-hosted web applications.
sidebar:
order: 12

Expand All @@ -9,7 +10,6 @@ sidebar:
import { Details, GlossaryTooltip } from "~/components"

When you protect a site with Cloudflare Access, Cloudflare checks every HTTP request bound for that site to ensure that the request has a valid `CF_Authorization` cookie. If a request does not include the cookie, Access will block the request.

## Access JWTs

The `CF_Authorization` cookie contains the user's identity in the form of a JSON Web Token (JWT). Cloudflare securely creates these tokens through the OAUTH or SAML integration between Cloudflare Access and the configured identity provider.
Expand Down
Loading