cloudflare-zero-trust-access

Cloudflare Access authentication for Workers uses JWT validation and Hono middleware. Install @hono/cloudflare-access, configure environment variables in wrangler.jsonc, and apply the cloudflareAccess middleware to protected routes. The middleware validates tokens issued by Cloudflare's Zero Trust platform automatically.

Yes, service tokens enable machine-to-machine authentication alongside user JWT validation. Configure service token authentication in your Worker to allow automated systems and APIs to authenticate without user interaction, supporting admin dashboards and inter-service communication.

Manual JWT validation uses Web Crypto API within Cloudflare Workers to verify tokens directly without middleware. Extract the token, validate the signature against Cloudflare's public keys, and check claims—essential for custom workflows where Hono integration isn't suitable.

Yes, this Skill includes patterns for combining Cloudflare Access authentication with CORS configuration. Set headers correctly and order middleware to handle both token validation and cross-origin requests, with built-in error prevention for common conflicts.

Multi-tenant configurations leverage Access tokens and environment-driven settings to isolate tenants. Use JWT claims to route requests to tenant-specific resources and configure separate Access policies per tenant, with TypeScript typings to prevent configuration errors.

Testing helpers and production-ready type definitions support local and staging validation. Mock tokens and test error prevention patterns before deploying, ensuring JWT validation, middleware ordering, and service token flows work correctly in your environment.