- Needs
- A Cloudflare account with a Pages project, an Access application and an API token
- Or
- A Proofline connection for hosted reports (preview)
- Help
- Set up protected publishing
When to use it
Use it when the developer needs the screenshots, video and full timeline, not just the issue text. Publishing is also the step that makes one-click GitHub issues possible, since each issue links to its report.
How Cloudflare reports are protected
- Each report is a separate preview deployment with its own URL. Publishing never replaces an earlier report or your project’s production site.
- Cloudflare Access handles sign-in using the policy you define, such as specific emails with one-time PINs or your identity provider.
- Every deployment also includes a Pages Function that verifies the Access token’s signature, issuer, audience and expiry before serving any page, image, recording or download, and fails closed. A missing or bypassed Access rule does not expose the report.
- Hosted pages run no scripts, are not cached, and serve captured files as downloads.
Setup in brief
Create a Direct Upload Pages project, protect its preview deployments with an Access application and an Allow policy, then enter the account ID, a scoped API token, the project name, the Access application ID and team domain in Settings → Publishing. Verify Access & save checks the configuration. The setup guide has every step.
Proofline hosted reports
With a Proofline connection (preview), you can host a report on Proofline instead of setting up Cloudflare. Only workspace members you select can open it, and you can invite other readers, who sign in with a free Proofline account. A hosted report stays until you delete it, within your workspace’s storage quota.
Limits and costs
- On Cloudflare, each file must be at most 25 MiB, and a report at most 20,000 files.
- Cloudflare reports use Pages Functions requests. Your Cloudflare plan’s limits and billing apply.
- Unpublish report deletes the deployment. It cannot recall copies readers already downloaded, and deleting the local recording does not unpublish it.
- The extension does not set up Cloudflare identity providers or grant readers access for you.
Record your next bug instead of describing it
Session Recorder is free and open source under the AGPL-3.0. Recording and ZIP export need no account. AI, transcription and publishing are optional: use your own providers, whose charges apply, or use credits with the optional Proofline connection preview when it reaches your installed version.