How does it prevent React Router redirect loops?

It provides a CustomNavigationClient that overrides MSAL's default window-based navigation, allowing React Router to handle internal transitions without losing the authentication hash fragment.

Is this compatible with the latest MSAL v5 migration?

Yes, the skill is configured for @azure/msal-react v5.0.2 and accounts for the upcoming deprecations and retirement schedules for ADAL and Azure AD B2C.

Why use the jose library instead of MSAL in Cloudflare Workers?

MSAL.js relies on browser or Node.js specific APIs that are unavailable in the Cloudflare Workers V8 runtime. The jose library is a lightweight, standards-compliant alternative that works perfectly in serverless environments for JWT validation.

Does this skill handle the 24-hour refresh token limit for SPAs?

Yes, it includes patterns to catch InteractionRequiredAuthError (AADSTS700084) and trigger interactive token acquisition when the fixed 24-hour SPA refresh token expires.

Azure Auth for React & Cloudflare Workers

Name: Azure Auth for React & Cloudflare Workers
Author: ma1orek

byma1orek

0•

安全与测试

Implements secure Microsoft Entra ID authentication for React SPAs and Cloudflare Workers using MSAL.js and serverless JWT validation.

This skill provides a comprehensive full-stack pattern for integrating Microsoft Entra ID (Azure AD) into modern web applications. It bridges the gap between frontend authentication and serverless backend validation by combining @azure/msal-react for the browser with the lightweight jose library for Cloudflare Workers. It specifically addresses critical production hurdles, including Authorization Code Flow with PKCE, silent sign-in loops (AADSTS50058), and the 24-hour refresh token limitations inherent to Single Page Applications, ensuring a robust and secure identity layer.

主要功能

01Custom NavigationClient integration for React Router v6 compatibility

02Full-stack implementation using Authorization Code Flow + PKCE

03Automated handling of common Entra ID errors like AADSTS50058 and AADSTS700084

04Optimized JWT validation for Cloudflare Workers using the jose library

050 GitHub stars

06Pre-configured MSAL provider setup with best-practice cache and logging settings

使用场景

01Securing serverless API endpoints on Cloudflare Workers with Entra ID tokens

02Resolving complex authentication redirect loops and state management issues in React SPAs

03Building enterprise-grade React applications with Microsoft Single Sign-On (SSO)

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ma1orek/replay azure-auth

For use in Claude.ai and ChatGPT

Download Skill