Repository navigation

Rotate project proxy tokens when access changes - #379

Merged

Brooooooklyn merged 29 commits into

security/1b-proxy-token-v2from

security/1c-proxy-token-rotation

Oct 8, 2026

Merged

Rotate project proxy tokens when access changes#379
Brooooooklyn merged 29 commits into
security/1b-proxy-token-v2from
security/1c-proxy-token-rotation

Commits on Oct 8, 2026
- Add the project proxy token generation
  
  Brooooooklyn
  and
  claude
  authored
  6ac3d0d
- Add Cloudflare helpers for proxy token rotation
  
  Brooooooklyn
  and
  claude
  authored
  0fc881c
- Rotate a project's proxy token across its Workers
  
  Brooooooklyn
  and
  claude
  authored
  d9a329a
- Rotate proxy tokens when a member loses deploy access or their code is replaced
  
  Brooooooklyn
  and
  claude
  authored
  f03433b
- Add the rotate-proxy-tokens operator command
  
  Brooooooklyn
  and
  claude
  authored
  e111e75
- Warn project owners when a credential rotation is stuck
  
  Brooooooklyn
  and
  claude
  authored
  a897cd2
- Document proxy token rotation
  
  Brooooooklyn
  and
  claude
  authored
  94eef37
- Explain recovery after a rollback below generation-aware releases
  
  Brooooooklyn
  and
  claude
  authored
  1d05679
- Rotate when replacing code from an admin-suspended collaborator
  
  Brooooooklyn
  and
  claude
  authored
  c83da05
- Initialize the proxy token generation on deploy
  
  Brooooooklyn
  and
  claude
  authored
  2a8ccc6
- Require a project or --all to rotate proxy tokens
  
  Brooooooklyn
  and
  claude
  authored
  81fd953
- Use only the proxy key on proxy-to-API metadata calls
  
  Brooooooklyn
  and
  claude
  authored
  30f991e
- Update the proxy token runbook and rollback notes
  
  Brooooooklyn
  and
  claude
  authored
  b456689
- Show rotation progress without the Cloudflare API token
  
  Brooooooklyn
  and
  claude
  authored
  cc7971e
- Rotate proxy tokens when an administrator suspends a member
  
  Brooooooklyn
  and
  claude
  authored
  b91c12c
- Keep the drain wait after a PATCH from a failed rotation attempt
  
  Brooooooklyn
  and
  claude
  authored
  4256dc0
- Close the proxy token floor when a project is deleted
  
  Brooooooklyn
  and
  claude
  authored
  d539aad
- Keep new proxy tokens away from retained code of former members
  
  Brooooooklyn
  and
  claude
  authored
  ac75285
- Attribute deployments from before project teams to their owner
  
  Brooooooklyn
  and
  claude
  authored
  f45ec4e
- Queue rotations when an administrator's suspension is first written
  
  Brooooooklyn
  and
  claude
  authored
  140ca31
- Send each Worker the token it holds
  
  Brooooooklyn
  and
  claude
  authored
  aeb0fe3
- Leave Workers without a proxy token binding on the token they hold
  
  Brooooooklyn
  and
  claude
  authored
  c1d0eaf
- Keep Cloudflare calls within the rotation run's time limit
  
  Brooooooklyn
  and
  claude
  authored
  6644134
- Queue an admin suspension's token rotations in one statement
  
  Brooooooklyn
  and
  claude
  authored
  b8b8522
- Clear the warn spy between runs in the platform warnings test
  
  Brooooooklyn
  and
  claude
  authored
  0c3ef7f
- Rotate after upgrading back from any platform rollback
  
  Brooooooklyn
  and
  claude
  authored
  09a9493
- Correct the rotation docs for old Workers, rollbacks and remote bindings
  
  Brooooooklyn
  and
  claude
  authored
  bdd90d7
- Log rotations that Cloudflare rate-limits
  
  Brooooooklyn
  and
  claude
  authored
  b4a0522
- Retry a rotation step soon when it failed after its PATCH
  
  Brooooooklyn
  and
  claude
  committed
  836bb81

Commits

Commits on Oct 8, 2026