azure-auth

Installation
Summary

Full-stack Microsoft Entra ID authentication for React SPAs with Cloudflare Workers backend validation.

  • Authorization Code Flow + PKCE with MSAL.js 5.0.2 on frontend; jose library for JWT validation in Workers (MSAL.js incompatible with Workers runtime)
  • Covers 8 documented error scenarios including AADSTS50058 silent sign-in loops, AADSTS700084 refresh token expiry, React Router redirect issues, and Safari/iOS 18 cookie limitations
  • Single-tenant and multi-tenant configuration patterns with token caching, account management, and interactive/silent token acquisition strategies
  • Includes Azure Portal setup, environment variable configuration, and migration guidance for ADAL retirement (Sept 2025) and Azure AD B2C sunset (May 2025)
SKILL.md

Azure Auth - Microsoft Entra ID for React + Cloudflare Workers

Package Versions: @azure/msal-react@5.0.2, @azure/msal-browser@5.0.2, jose@6.1.3 Breaking Changes: MSAL v4→v5 migration (January 2026), Azure AD B2C sunset (May 2025 - new signups blocked, existing until 2030), ADAL retirement (Sept 2025 - complete) Last Updated: 2026-01-21


Architecture Overview

┌─────────────────────┐     ┌──────────────────────┐     ┌─────────────────────┐
│   React SPA         │────▶│  Microsoft Entra ID  │────▶│  Cloudflare Worker  │
│   @azure/msal-react │     │  (login.microsoft)   │     │  jose JWT validation│
└─────────────────────┘     └──────────────────────┘     └─────────────────────┘
        │                                                          │
        │  Authorization Code + PKCE                               │
        │  (access_token, id_token)                                │
        └──────────────────────────────────────────────────────────┘
Related skills
Installs
332
GitHub Stars
776
First Seen
Jan 20, 2026