DroneDeploy and Cloudflare Workers

What this post added

DroneDeploy is using Cloudflare Workers to push authentication to the edge and serve collected images directly from Cloudflare's CDN. Workers are used to build a custom signed URL to ensure the correct images are surfaced to the correct consumer, safeguarding their multi-tenancy image storage model. The Worker intercepts requests for images, validates JWT credentials, and if valid, rewrites the request to the storage backend, signs the request with backend credentials, and returns the response. This involves parsing JWTs, validating signatures using the Web Crypto API, and generating HMAC signed URLs for Google Cloud Storage.