{"enrichment":{"faq":[{"a":"cloudflare-zero-trust-access provides Hono middleware for one-line setup and manual JWT validation templates. The skill includes patterns to integrate Cloudflare Access authentication into Workers by validating JWT tokens from Access, handling CORS preflight requests, and managing JWT headers. Start by configuring your Access application, then use the provided middleware or validation code to protect your Worker routes.","q":"How do I authenticate Cloudflare Workers with Zero Trust?"},{"a":"cloudflare-zero-trust-access addresses this common issue with specific solutions for CORS and JWT header problems. The skill shows how to configure Access policies to allow OPTIONS requests for preflight, properly forward authentication headers from your frontend, and validate JWT tokens without blocking legitimate CORS flows. Check the CORS troubleshooting section for step-by-step fixes.","q":"What should I do if CORS preflight is blocked by Cloudflare Access?"},{"a":"cloudflare-zero-trust-access includes patterns for machine-to-machine and CI/CD authentication using service tokens. Create a service token in your Access application, store it securely in your CI/CD environment, and use the provided validation templates to authenticate requests from your pipeline. The skill covers token rotation, scoping, and integration with common CI/CD platforms.","q":"How can I set up service tokens for CI/CD authentication?"},{"a":"Yes, cloudflare-zero-trust-access provides patterns for role-based and multi-tenant access control. Extract user identity and group information from the JWT token, then implement authorization logic based on roles or tenant identifiers. The skill includes examples for mapping Access groups to application roles and enforcing policies at the Worker level.","q":"Can cloudflare-zero-trust-access implement role-based access control?"},{"a":"cloudflare-zero-trust-access supplies manual JWT validation templates for scenarios where middleware isn't suitable. Retrieve the JWT from the Authorization header or Cf-Access-Jwt-Assertion header, verify the signature using Cloudflare's public keys, validate claims like expiration and audience, and extract user metadata. The skill includes code snippets for both approaches.","q":"What does manual JWT validation in cloudflare-zero-trust-access involve?"},{"a":"cloudflare-zero-trust-access covers identity provider integration including Azure AD, Okta, GitHub, and others. Configure your chosen provider in the Cloudflare Zero Trust dashboard, set up Access policies with provider-specific rules, and optionally apply geographic restrictions. The skill provides guidance on team domain configuration and policy setup for common enterprise and SaaS scenarios.","q":"How do I connect identity providers to Cloudflare Access?"}],"shadow_tags":["identity-provider-integration","machine-to-machine-auth","zero-trust-security","middleware-pattern","jwt-token-validation","saas-multi-tenancy","cors-handling","policy-enforcement","web-crypto-api","production-ready"],"summary_rewrite":"This skill provides production-ready patterns for adding Cloudflare Access authentication to Workers applications. It includes Hono middleware for one-line setup, manual JWT validation templates, service token support for backend auth, and solutions for common issues like CORS preflight blocking and missing headers."},"files":[{"bytes":10309,"path":"plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/SKILL.md","sha256":"b56dbcf70625f3f86f87425aba0e4a73313ce453c10dc5e32aad7bc155281f29","url":"https://skillfed.io/files/secondsky/claude-skills/cloudflare-zero-trust-access/3ad02b6c/SKILL.md"}],"id":"secondsky/claude-skills/cloudflare-zero-trust-access","links":{"html":"https://skillfed.io/secondsky/claude-skills/cloudflare-zero-trust-access","md":"https://skillfed.io/secondsky/claude-skills/cloudflare-zero-trust-access.md","repo":"https://github.com/secondsky/claude-skills"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":29,"language":"TypeScript","last_updated":"2026-07-25","license":"MIT","name":"cloudflare-zero-trust-access","publisher":"secondsky","stars":196},"relations":{"similar":[{"id":"bobmatnyc/claude-mpm-skills/hono-middleware"},{"id":"Mindrally/skills/hono-typescript"},{"id":"secondsky/claude-skills/hono-routing"},{"id":"freestyle-voice/freestyle/hono"},{"id":"yusukebe/hono-skill/hono"},{"id":"alinaqi/maggy/supabase-node"},{"id":"oakoss/agent-skills/hono"},{"id":"secondsky/claude-skills/bun-hono-integration"},{"id":"jezweb/claude-skills/hono-api-scaffolder"},{"id":"secondsky/claude-skills/cloudflare-workers-frameworks"}]},"slug":{"owner":"secondsky","repo":"claude-skills","skill":"cloudflare-zero-trust-access"},"version":"3ad02b6c"}