Azure Entra ID Auth (React + Cloudflare) FAQs

Question 1

Can I use MSAL.js directly in Cloudflare Workers?

Accepted Answer

No, MSAL.js relies on browser or Node.js APIs not available in the Workers V8 isolate. This skill uses the 'jose' library, which is pure JavaScript and compatible with the Workers runtime for server-side token validation.

Question 2

Is this compatible with the latest Microsoft Entra ID standards?

Accepted Answer

Yes, it uses MSAL v5, the Authorization Code Flow with PKCE, and accounts for upcoming ADAL and Azure AD B2C retirement schedules.

Question 3

What libraries are required?

Accepted Answer

You will need @azure/msal-react and @azure/msal-browser for the frontend, and the jose library for the Cloudflare Workers backend.

Question 4

How does this handle SPA refresh token expiration?

Accepted Answer

It includes logic to catch 'InteractionRequiredAuthError' and trigger 'acquireTokenRedirect', handling the 24-hour expiration limit imposed on SPA-issued refresh tokens by Microsoft Entra ID.

Question 5

Does this work with React Router v6?

Accepted Answer

Yes, it includes a CustomNavigationClient implementation to solve the common issue where React Router v6 strips auth hash fragments, preventing infinite redirect loops.

Azure Entra ID Auth (React + Cloudflare)

Key Features

Use Cases

Azure Entra ID Auth (React + Cloudflare)

Key Features

Use Cases