azure-auth

SKILL.md

Full-stack Microsoft Entra ID authentication for React SPAs with Cloudflare Workers backend validation.

Authorization Code Flow + PKCE with MSAL.js 5.0.2 on frontend; jose library for JWT validation in Workers (MSAL.js incompatible with Workers runtime)

Covers 8 documented error scenarios including AADSTS50058 silent sign-in loops, AADSTS700084 refresh token expiry, React Router redirect issues, and Safari/iOS 18 cookie limitations

Single-tenant and multi-tenant configuration patterns with token caching, account management, and interactive/silent token acquisition strategies

Includes Azure Portal setup, environment variable configuration, and migration guidance for ADAL retirement (Sept 2025) and Azure AD B2C sunset (May 2025)

Azure Auth - Microsoft Entra ID for React + Cloudflare Workers

Package Versions: @azure/msal-react@5.0.2, @azure/msal-browser@5.0.2, jose@6.1.3
Breaking Changes: MSAL v4→v5 migration (January 2026), Azure AD B2C sunset (May 2025 - new signups blocked, existing until 2030), ADAL retirement (Sept 2025 - complete)
Last Updated: 2026-01-21

Architecture Overview