Hysen Labs
Open-source project
chen2he/orange-cloud avatar
chen2he

orange-cloud

Open-source native Cloudflare client for iPhone, iPad & Apple Watch — sign in with OAuth, no API tokens to paste. Native Android app (Kotlin/Compose) in development.

450 stars83 forksSwiftNOASSERTION
DEEP OPEN-SOURCE ANALYSIS

Orange Cloud: a native Cloudflare client for Apple devices

Orange Cloud manages your Cloudflare account from iPhone, iPad, and Apple Watch using OAuth sign in.

What Orange Cloud manages

Orange Cloud is a third party Cloudflare management app for iPhone, iPad, and Apple Watch, built entirely with Swift and SwiftUI. The README says that unlike other clients it signs you in through Cloudflare's official OAuth 2.0 and PKCE flow, so there is no API token to copy and paste. The baseline is iOS 17, with iOS 18 and 26 capabilities layered on progressively on devices that support them. The README lists features that include OAuth 2.0 and PKCE sign in with per scope permission selection and one tap re authorization. A dashboard gives an overview of the account. Analytics show traffic and other account metrics. A Workers live tail lets you watch worker logs in real time. The README frames the app as a native alternative to using the Cloudflare dashboard in a browser, with the Apple Watch included as a device class other clients often skip. The project home page is o-c.do and the README links to privacy, terms, a TestFlight beta, a Telegram channel, and a Ko fi page for those who want to follow or support the work. The README lists the Apple Watch as a supported device, which is unusual among Cloudflare clients and is presented as a reason the app covers the whole Apple platform rather than only phones and tablets.

Sign in without API tokens

The README makes the OAuth sign in the central difference from other Cloudflare clients. Instead of asking you to create an API token and paste it into the app, Orange Cloud uses Cloudflare's official OAuth 2.0 plus PKCE authorization flow. The README says this gives per scope permission selection, so you choose what the app can access, and it offers one tap re authorization when needed. The PKCE part of the flow is a security measure built into OAuth that protects the exchange without a client secret. The minimum system version is iOS 17, and the README notes that newer iOS 18 and 26 features appear on the devices that support them, implying the app grows its feature set as the OS allows. By avoiding API tokens, the app removes a common setup step and a common source of leaked credentials. The README presents this as the reason the app feels different from existing clients, and it ties the experience to Apple's native sign in patterns rather than manual key management that other dashboards require from their users. Per scope permission selection means the app asks the user to choose access at sign in, so the account owner stays in control of what the native client can read or change on their Cloudflare account.

Platform and distribution

Orange Cloud targets the Apple platform family. iPhone, iPad, and Apple Watch. The README shows an App Store download link with the app id 6779323783, and it also links to a TestFlight beta for people who want to try pre release builds. The app is built with Swift and SwiftUI, and the README says it is built entirely with those tools rather than a cross platform framework. A rank badge links to the project's App Store ranking, and a Trendshift badge shows it as a Swift repository of the day. The README provides both an English section and a Chinese section, with language toggles at the top. Links in the README include the website o-c.do, a privacy page, terms page, TestFlight join link, Telegram channel, and Ko fi support page. The metadata lists Swift as the primary language and the default branch as main. The README does not state a specific open source license in the excerpt, and the project metadata marks the license as not asserted, so users should check the repository for the exact terms. The English and Chinese sections sit side by side with a language toggle, so the same README serves both audiences without requiring a separate translated file in the excerpt that is shown to readers.

Editorial conclusion

Orange Cloud is written in Swift and SwiftUI and signs in through Cloudflare's OAuth 2.0 and PKCE flow. It is available on the App Store and through a TestFlight beta.

DEEP OPEN-SOURCE ANALYSIS

Official sources

Community notes

Community notes