1# Static Web Apps - Routing & Authentication
2 
3## Route Configuration
4 
5Create `staticwebapp.config.json` in the app root:
6 
7```json
8{
9  "routes": [
10    {
11      "route": "/api/*",
12      "allowedRoles": ["authenticated"]
13    }
14  ],
15  "navigationFallback": {
16    "rewrite": "/index.html",
17    "exclude": ["/api/*", "/*.{png,jpg,gif}"]
18  },
19  "responseOverrides": {
20    "404": {
21      "rewrite": "/404.html"
22    }
23  }
24}
25```
26 
27## Authentication
28 
29### Built-in Providers
30 
31```json
32{
33  "routes": [
34    {
35      "route": "/admin/*",
36      "allowedRoles": ["admin"]
37    }
38  ],
39  "auth": {
40    "identityProviders": {
41      "azureActiveDirectory": {
42        "registration": {
43          "openIdIssuer": "https://login.microsoftonline.com/{tenant-id}",
44          "clientIdSettingName": "AAD_CLIENT_ID",
45          "clientSecretSettingName": "AAD_CLIENT_SECRET"
46        }
47      }
48    }
49  }
50}
51```
52 
53### Supported Providers
54 
55- Azure Active Directory / Entra ID
56- GitHub
57- Twitter
58- Custom OpenID Connect
59 
60## Role-Based Access
61 
62```json
63{
64  "routes": [
65    { "route": "/admin/*", "allowedRoles": ["admin"] },
66    { "route": "/account/*", "allowedRoles": ["authenticated"] },
67    { "route": "/*", "allowedRoles": ["anonymous"] }
68  ]
69}
70```
71