Making changes in DNS zone using API on behalf of Cloudflare customer

Hi,

My service requires the customer to add three DNS records to their DNS (email DKIM verification). Is it possible to streamline this so customers using CloudFlare can grant me an access token, so I can make the changes on their behalf using CloudFlares’s API? Like Oauth 2 flow where there’s some CloudFlare’s login popup which allows my service to acquire an access token?

They can generate a token with these instructions:
https://developers.cloudflare.com/api/tokens/create