cloudflare-zero-trust-access
This skill provides production-ready patterns for adding Cloudflare Access authentication to Workers applications. It includes Hono middleware for one-line setup, manual JWT validation templates, service token support for backend auth, and solutions for common issues like CORS preflight blocking and missing headers.
Cloudflare Zero Trust Access skill integrates Access authentication into Workers with JWT validation and Hono middleware.
AI-generated summary based on this skill's SKILL.md
Install
secondsky/claude-skills/cloudflare-zero-trust-access · repository language: TypeScript
git clone https://github.com/secondsky/claude-skills
cp -r claude-skills/plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access ~/.claude/skills/cloudflare-zero-trust-accessnpx skillfed install secondsky/claude-skills/cloudflare-zero-trust-accessFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I authenticate Cloudflare Workers with Zero Trust?
cloudflare-zero-trust-access provides Hono middleware for one-line setup and manual JWT validation templates. The skill includes patterns to integrate Cloudflare Access authentication into Workers by validating JWT tokens from Access, handling CORS preflight requests, and managing JWT headers. Start by configuring your Access application, then use the provided middleware or validation code to protect your Worker routes.
What should I do if CORS preflight is blocked by Cloudflare Access?
cloudflare-zero-trust-access addresses this common issue with specific solutions for CORS and JWT header problems. The skill shows how to configure Access policies to allow OPTIONS requests for preflight, properly forward authentication headers from your frontend, and validate JWT tokens without blocking legitimate CORS flows. Check the CORS troubleshooting section for step-by-step fixes.
How can I set up service tokens for CI/CD authentication?
cloudflare-zero-trust-access includes patterns for machine-to-machine and CI/CD authentication using service tokens. Create a service token in your Access application, store it securely in your CI/CD environment, and use the provided validation templates to authenticate requests from your pipeline. The skill covers token rotation, scoping, and integration with common CI/CD platforms.
Can cloudflare-zero-trust-access implement role-based access control?
Yes, cloudflare-zero-trust-access provides patterns for role-based and multi-tenant access control. Extract user identity and group information from the JWT token, then implement authorization logic based on roles or tenant identifiers. The skill includes examples for mapping Access groups to application roles and enforcing policies at the Worker level.
What does manual JWT validation in cloudflare-zero-trust-access involve?
cloudflare-zero-trust-access supplies manual JWT validation templates for scenarios where middleware isn't suitable. Retrieve the JWT from the Authorization header or Cf-Access-Jwt-Assertion header, verify the signature using Cloudflare's public keys, validate claims like expiration and audience, and extract user metadata. The skill includes code snippets for both approaches.
How do I connect identity providers to Cloudflare Access?
cloudflare-zero-trust-access covers identity provider integration including Azure AD, Okta, GitHub, and others. Configure your chosen provider in the Cloudflare Zero Trust dashboard, set up Access policies with provider-specific rules, and optionally apply geographic restrictions. The skill provides guidance on team domain configuration and policy setup for common enterprise and SaaS scenarios.
SKILL.md
rendered from the published skill — quoted content, verbatim
name: cloudflare-zero-trust-access description: "Cloudflare Zero Trust Access authentication for Workers. Use for JWT validation, service tokens, CORS, or encountering preflight blocking, cache race conditions, missing JWT headers." license: MIT allowed-tools: - Read - Write - Edit - Bash metadata: version: "1.0.0" category: authentication framework: hono platform: cloudflare-workers package_versions: "@hono/cloudflare-access": "0.3.1" "hono": "4.10.3" "@cloudflare/workers-types": "4.20251014.0" errors_prevented: 8 token_savings: "58%" time_savings: "2.5 hours" production_tested: true last_verified: "2025-10-28" keywords: - Cloudflare Access - Zero Trust - Cloudflare Zero Trust Access - Access authentication - JWT validation - access jwt - service tokens - hono cloudflare access - hono-cloudflare-access middleware - workers authentication - protect worker routes - admin authentication - access policy - identity providers - azure ad access - google workspace access - okta access - github access - rbac cloudflare - geographic restrictions - multi-tenant
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 15 files
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/SKILL.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/references/access-policy-setup.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/references/common-errors.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/references/jwt-payload-structure.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/references/quick-start.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/references/service-tokens-guide.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/references/use-cases.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/references/value-proposition.md
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/scripts/create-service-token.sh
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/scripts/test-access-jwt.sh
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/templates/.env.example
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/templates/cors-access.ts
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/templates/hono-basic-setup.ts
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/templates/jwt-validation-manual.ts
plugins/cloudflare-zero-trust-access/skills/cloudflare-zero-trust-access/templates/multi-tenant.ts