How does this skill handle the 24-hour refresh token limit in SPAs?

The provided implementation includes an acquisition pattern that catches 'InteractionRequiredAuthError' (AADSTS700084). When a refresh token expires, it automatically triggers an interactive redirect to refresh the user's session.

Can I use this for multi-tenant Azure applications?

Absolutely. The configuration patterns allow you to define specific tenant IDs or use the 'common' or 'organizations' endpoints for multi-tenant Microsoft Entra ID environments.

Why can't I use MSAL.js directly in Cloudflare Workers?

MSAL.js relies on browser-specific APIs like localStorage and Node.js-specific crypto modules that are unavailable in the Cloudflare Workers V8 isolate runtime. This skill uses the 'jose' library for lightweight, compatible JWT validation at the edge.

Does this support React Router v6 redirect loops?

Yes, it includes a CustomNavigationClient that integrates MSAL with the React Router 'useNavigate' hook, preventing the common issue where the router strips auth hash fragments and causes infinite loops.

Azure Auth for React & Cloudflare

Name: Azure Auth for React & Cloudflare
Author: jezweb

byjezweb

•

169

•

보안 및 테스팅

Implements Microsoft Entra ID (Azure AD) authentication for React SPAs and Cloudflare Workers using MSAL.js and JWT validation.

This skill provides a comprehensive implementation pattern for Microsoft Entra ID (formerly Azure AD) authentication across the full stack. It bridges the gap between the browser and the edge by using MSAL.js for React-based Authorization Code Flow with PKCE and the 'jose' library for lightweight, edge-compatible JWT validation within Cloudflare Workers. The skill includes pre-built configurations to solve common enterprise auth hurdles, such as handling AADSTS refresh token expiration, resolving React Router redirect loops, and implementing secure token acquisition for API calls.

주요 기능

01Standardized Authorization Code Flow with PKCE for enhanced security.

02169 GitHub stars

03Edge-compatible JWT validation for Cloudflare Workers using the 'jose' library.

04Complete Microsoft Entra ID (Azure AD) SSO implementation for React.

05Integrated error handling for AADSTS50058 silent loops and AADSTS700084 expiration.

06Custom NavigationClient implementation for React Router v6 compatibility.

사용 사례

01Securing Cloudflare Worker microservices using Azure AD tenant-specific Bearer tokens.

02Building enterprise SaaS applications that require secure Microsoft SSO login.

03Migrating legacy ADAL or MSAL v2 frontend applications to MSAL v3 with modern best practices.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jezweb/claude-skills azure-auth

For use in Claude.ai and ChatGPT

Download Skill