Five new Cloudflare Leaked Credentials Detection fields let you challenge or block login attempts that submit previously exposed credentials.
Where: This change applies to B2C Commerce.
How: The Boolean field cf.waf.auth_detected indicates that Cloudflare
detected authentication material on the request. Under cf.waf.credential_check,
four additional Boolean fields identify specific risks: password_leaked,
username_leaked, username_and_password_leaked, and
username_password_similar. All five fields are available in the CDN Zones API
and in the Business Manager expression editor for Custom Rules and Rate Limits.