Support API Tokens for Cloudflare auth (safer than using Global API Keys) about cloudflare-purge-action HOT 4 CLOSED

Gotcha, sorry about that! I'll reopen this until I push an update 👍

from cloudflare-purge-action.

+1 on switching from a global API key to a permission-specific API token. Here's an example purge code using a token:

curl -X POST "https://api.cloudflare.com/client/v4/zones/********/purge_cache"
-H "Content-Type:application/json"
-H "Authorization: Bearer ********"
--data '{"purge_everything":true}'

It should be a simple change to make and removes the need to have the CLOUDFLARE_EMAIL secret. Hope this helps. :)

from cloudflare-purge-action.

Hmm, after searching around for that error code it seems like most people with this problem had a copy/paste typo with their API key — either only getting part of it or an extra space either before/after it, etc... I'd first try just deleting that secret and pasting it in again and let me know if that works.

The dashboard is not the most intuitive so make sure you're under My Profile (in the top right), then the API Tokens tab, and then press View for the Global API Key.

I haven't looked into supporting API Tokens yet if that's what you're using — I assume they work the same but I've been meaning to try them myself since they announced them a few weeks ago.

Let me know if that doesn't help, sorry I don't have a more specific answer!

from cloudflare-purge-action.

Ah, thats it, I cant use API Tokens.

Would be nice if that could be added...

from cloudflare-purge-action.