[workers-auth] Avoid stale Access service-token headers

[teamleaderleo]

Fixes #15070

getAccessHeaders() stored Access service-token headers in the domain cache. If the current CLOUDFLARE_ACCESS_CLIENT_ID / CLOUDFLARE_ACCESS_CLIENT_SECRET pair was later removed or became incomplete, a later call for the same domain could reuse the earlier complete pair.

This change returns service-token headers directly from the current environment instead of storing them in the domain cache. Interactive CF_Authorization cookie caching is unchanged.

---

• Tests
  • Tests included/updated
  • Automated tests not possible - manual testing has been completed as follows:
  • Additional testing not necessary because:
• Public documentation
  • Cloudflare docs PR(s):
  • Documentation not necessary because: this only corrects reuse of existing Access service-token environment variables and does not add or change user-facing configuration.

Japanese dwarf flying squirrel peeking out of tree:

---

[changeset-bot]

🦋 Changeset detected

Latest commit: c96c479

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
@cloudflare/workers-auth	Patch
@cloudflare/remote-bindings	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[workers-devprod]

Codeowners approval required for this PR:

• ✅ @cloudflare/wrangler

Show detailed file reviewers

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[workers-devprod]

Codeowners reviews satisfied

[pkg-pr-new]

@cloudflare/autoconfig

npm i https://pkg.pr.new/@cloudflare/autoconfig@15080

@cloudflare/build-output-utils

npm i https://pkg.pr.new/@cloudflare/build-output-utils@15080

@cloudflare/config

npm i https://pkg.pr.new/@cloudflare/config@15080

create-cloudflare

npm i https://pkg.pr.new/create-cloudflare@15080

@cloudflare/deploy-helpers

npm i https://pkg.pr.new/@cloudflare/deploy-helpers@15080

@cloudflare/kv-asset-handler

npm i https://pkg.pr.new/@cloudflare/kv-asset-handler@15080

miniflare

npm i https://pkg.pr.new/miniflare@15080

@cloudflare/pages-functions

npm i https://pkg.pr.new/@cloudflare/pages-functions@15080

@cloudflare/pages-shared

npm i https://pkg.pr.new/@cloudflare/pages-shared@15080

@cloudflare/unenv-preset

npm i https://pkg.pr.new/@cloudflare/unenv-preset@15080

@cloudflare/vite-plugin

npm i https://pkg.pr.new/@cloudflare/vite-plugin@15080

@cloudflare/vitest-pool-workers

npm i https://pkg.pr.new/@cloudflare/vitest-pool-workers@15080

@cloudflare/workers-auth

npm i https://pkg.pr.new/@cloudflare/workers-auth@15080

@cloudflare/workers-editor-shared

npm i https://pkg.pr.new/@cloudflare/workers-editor-shared@15080

@cloudflare/workers-utils

npm i https://pkg.pr.new/@cloudflare/workers-utils@15080

wrangler

npm i https://pkg.pr.new/wrangler@15080

commit: c96c479