Infinitely extensible Access policies

What this post added

Introduced the 'External Evaluation' rule option for Cloudflare Access policies, allowing for infinitely customizable policies by calling external APIs during policy evaluation. This enables the incorporation of any signal (e.g., mTLS certificate verification against a registry, IP address threat feeds) into Zero Trust access decisions, moving beyond user identity, device, and location. An open-source repository with example code for consuming Access claims and verifying signing keys is provided.