Type
New feature
Description
Automatic JWT OIDC Tokens in Workers Delivered by a Cloudflare Managed Trust Store
Benefit
At the moment, secrets need to be hardcoded as environment variables which makes them a little hard to change when automatic rotation etc is needed. It would be so cool if Cloudflare could inject an OIDC JWT token signed by a Cloudflare managed trust (with the subject as the Workers name) somewhere where it can be accessed by the executing code (file system or the context in the runtime).
This is a practice that’s employed and considered best practice by Github Actions Workflows (see About security hardening with OpenID Connect - GitHub Docs)