All skills
clerk avatar

/clerk-react-patterns

@ca5e365 official
by clerkclerk/skills83 stars
5

React SPA auth patterns with @clerk/react for Vite/CRA - ClerkProvider setup, useAuth/useUser/useClerk hooks, React Router protected routes, custom sign-in flows. Triggers on: Vite Clerk setup, React Router auth, useAuth hook, protected route, custom sign-in form React.

Use this Skill: https://skilld.dev/gh/clerk/skills/clerk-react-patterns

This session only. Nothing lands on disk.

referencesprotected-routes.md

≈558 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Protected Routes (CRITICAL)

ProtectedRoute Component

Wrap protected routes with a guard component:

import { Navigate, Outlet } from 'react-router-dom'
import { useAuth } from '@clerk/react'

export function ProtectedRoute() {
  const { isLoaded, isSignedIn } = useAuth()

  if (!isLoaded) return <div>Loading...</div>
  if (!isSignedIn) return <Navigate to="/sign-in" replace />

  return <Outlet />
}

Router Setup (React Router v6/v7)

import { BrowserRouter, Routes, Route } from 'react-router-dom'
import { ClerkProvider } from '@clerk/react'
import { ProtectedRoute } from './ProtectedRoute'
import { Dashboard } from './Dashboard'
import { Settings } from './Settings'
import { SignInPage } from './SignInPage'

function App() {
  return (
    <ClerkProvider publishableKey={import.meta.env.VITE_CLERK_PUBLISHABLE_KEY}>
      <BrowserRouter>
        <Routes>
          <Route path="/sign-in" element={<SignInPage />} />
          <Route element={<ProtectedRoute />}>
            <Route path="/dashboard" element={<Dashboard />} />
            <Route path="/settings" element={<Settings />} />
          </Route>
        </Routes>
      </BrowserRouter>
    </ClerkProvider>
  )
}

ClerkProvider must be an ancestor of both the router and any Clerk hooks/components.

Org-Gated Route

import { Navigate, Outlet } from 'react-router-dom'
import { useAuth } from '@clerk/react'

export function OrgRoute() {
  const { isLoaded, isSignedIn, orgId } = useAuth()

  if (!isLoaded) return <div>Loading...</div>
  if (!isSignedIn) return <Navigate to="/sign-in" replace />
  if (!orgId) return <Navigate to="/select-org" replace />

  return <Outlet />
}

Using Prebuilt Components

For simpler cases, wrap with <SignedIn> / <SignedOut> equivalents:

import { Show } from '@clerk/react'
import { Navigate } from 'react-router-dom'

export function Dashboard() {
  return (
    <Show when="signed-in" fallback={<Navigate to="/sign-in" replace />}>
      <DashboardContent />
    </Show>
  )
}

The ProtectedRoute pattern is preferred for route-level control; <Show> is better for component-level.

Docs

Source: SKILL.md on GitHub

No alerts17d4 checks · Risk SAFE
  • Gen Agent Trust Hub17d

    This skill provides standard documentation, reference patterns, and templates for implementing Clerk authentication in React single-page applications. It follows best practices for authentication flows and uses official dependencies.

  • Socket17d

    No alerts

  • Snyk17d

    Risk: LOW · No issues

  • ZeroLeaks5mo

    Score: 93/100 · 2 sections analyzed

Signed by skilld at ca5e365. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 6 months ago
What it can do
Network
metadata
{
  "author": "clerk",
  "version": "1.0.0"
}
All 1 allowed tools
WebFetch
  • React
  • clerk
  • authentication
  • vite
  • react-router
  • hooks
  • spa
  • protected-routes

README badge

README badge for clerk/skills/clerk-react-patterns

Provides patterns for @clerk/react authentication in Vite and Create React App SPAs, including ClerkProvider setup, useAuth/useUser/useClerk hooks, React Router protected routes, and custom sign-in flows. Covers client-side auth state management and token retrieval for API calls with React Router v6/v7.

Generated from the current SKILL.md.

Does this skill work with Next.js?
No. This skill is for Vite and Create React App SPAs using @clerk/react. For Next.js, use the clerk-nextjs-patterns skill instead.
Do I need to check isLoaded before using isSignedIn?
Yes. isLoaded must be true before trusting isSignedIn. Always guard on isLoaded first to avoid undefined values.
How do I get a JWT token to send with API requests?
Call getToken() from the useAuth hook, which returns a session JWT. Always null-check the result before using it.
How do I protect routes with React Router?
Create a ProtectedRoute component that checks isLoaded and isSignedIn with useAuth, then redirects unsigned users or renders an Outlet for protected children.

Generated from the current SKILL.md. These answers refresh after source changes.