@abgov/nx-adsp 13.1.3 → 13.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abgov/nx-adsp",
-  "version": "13.1.3",
+  "version": "13.1.4",
   "license": "Apache-2.0",
   "main": "src/index.js",
   "description": "Government of Alberta - Nx plugin for ADSP apps.",

package/src/generators/vue-app/files/AGENTS.md__tmpl__

@@ -40,24 +40,47 @@ executors read options from `project.json` and do not prompt.
 
 ## Auth pattern
 
+> ⚠️ **Never destructure `useKeycloak()`.** Unlike most Vue composables (which
+> return `ref`s that survive destructuring), this wrapper returns a
+> `readonly(reactive({...}))` whose fields are **plain values** — `authenticated`
+> is a `boolean`, `keycloak` is the instance-or-`undefined`, etc. Every field is
+> `false`/`undefined` at setup time and only populates **asynchronously** once
+> Keycloak's init settles. `const { keycloak } = useKeycloak()` therefore captures
+> a permanent `undefined`, so `keycloak?.login()` becomes a silent no-op and
+> `authenticated` never flips — and it *looks* fine because the initial render is
+> correct. Always keep the object (`const kc = useKeycloak()`) and read `kc.field`
+> at call/render time. This is the single most common way to break auth here.
+
 ```typescript
 import { useKeycloak } from '@dsb-norge/vue-keycloak-js';
 
-// useKeycloak() returns a DeepReadonly<VueKeycloakInstance>
-const { authenticated, fullName, ready, token, tokenParsed, keycloak } = useKeycloak();
+// useKeycloak() returns a readonly(reactive(...)) instance. Keep the object and
+// read fields off it — do NOT destructure. Destructuring snapshots each field at
+// setup time, so `kc.keycloak` would freeze at `undefined` (login() a no-op) and
+// `kc.authenticated` would never flip to true. All fields populate asynchronously
+// once Keycloak's init settles.
+const kc = useKeycloak();
 
-authenticated       // Ref<boolean> — true after sign-in
-fullName            // Ref<string | undefined> — display name from token
-ready               // Ref<boolean> — true once Keycloak init has settled
-token               // Ref<string | undefined> — current access token
+kc.authenticated    // boolean — true after sign-in
+kc.fullName         // string | undefined — display name from token
+kc.ready            // boolean — true once Keycloak init has settled
+kc.token            // string | undefined — current access token
 
 // Call Keycloak actions via the underlying keycloak-js instance:
-keycloak?.login()
-keycloak?.logout({ redirectUri: window.location.origin })
+kc.keycloak?.login()
+kc.keycloak?.logout({ redirectUri: window.location.origin })
 
 // Refresh token before an authenticated API call:
-await keycloak?.updateToken(30);
-const bearer = keycloak?.token;
+await kc.keycloak?.updateToken(30);
+const bearer = kc.keycloak?.token;
+```
+
+To run work when auth settles (it flips after mount, e.g. on return from the
+login redirect), `watch` it rather than reading once:
+
+```typescript
+import { watch } from 'vue';
+watch(() => kc.authenticated, (authed) => { if (authed) loadPrivateData(); }, { immediate: true });
 ```
 
 Route guard (in `router/index.ts`):
@@ -65,10 +88,10 @@ Route guard (in `router/index.ts`):
 ```typescript
 router.beforeEach((to) => {
   if (to.meta.requiresAuth) {
-    const { authenticated, ready, keycloak } = useKeycloak();
-    if (!ready) return true;    // let Keycloak init settle first
-    if (!authenticated) {
-      keycloak?.login({ redirectUri: window.location.origin + to.fullPath });
+    const kc = useKeycloak();
+    if (!kc.ready) return true;    // let Keycloak init settle first
+    if (!kc.authenticated) {
+      kc.keycloak?.login({ redirectUri: window.location.origin + to.fullPath });
       return false;
     }
   }
@@ -155,7 +178,6 @@ nx run <%= projectName %>:teardown-dev      # remove from dev environment
 
 - `src/main.ts` — Keycloak plugin is registered once here; do not call `new Keycloak()` elsewhere
 - `environments/environment.ts` — access URL and realm are pre-configured for the ADSP tenant
-- `silent-check-sso.html` — required for keycloak-js silent SSO; must be served from the app root
 - `vite.config.ts` — the `isCustomElement` predicate must stay to suppress Vue warnings for `goa-*` elements
 
 ## Sandbox deployment (local build)

package/src/generators/vue-app/files/public/nginx.conf__tmpl__

@@ -26,10 +26,6 @@ http {
       add_header Cache-Control "public, no-transform";
     }
 
-    location = /silent-check-sso.html {
-      add_header Cache-Control "no-store";
-    }
-
     location / {
       try_files $uri /index.html;
     }

package/src/generators/vue-app/files/src/App.spec.ts__tmpl__

@@ -1,27 +1,38 @@
 import { mount } from '@vue/test-utils';
-import { ref } from 'vue';
 import { describe, it, expect, vi } from 'vitest';
 
-vi.mock('@dsb-norge/vue-keycloak-js', () => ({
-  useKeycloak: () => ({
-    authenticated: ref(false),
-    fullName: ref(''),
-    // ready stays false — Keycloak's check-sso hasn't resolved (or failed).
-    ready: ref(false),
+// Mirror the real wrapper: useKeycloak() returns a reactive() whose fields are
+// plain values (NOT refs), with login/logout on the nested `keycloak` instance.
+// Build the state inside the (hoisted) factory to dodge vi.mock hoisting issues.
+vi.mock('@dsb-norge/vue-keycloak-js', async () => {
+  const { reactive } = await import('vue');
+  const kc = reactive({
+    authenticated: false,
+    fullName: '',
+    ready: true,
     keycloak: { login: vi.fn(), logout: vi.fn() },
-  }),
-}));
+  });
+  return { useKeycloak: () => kc };
+});
 
+import { useKeycloak } from '@dsb-norge/vue-keycloak-js';
 import App from './App.vue';
 
 describe('App shell header', () => {
-  it('shows Sign in when unauthenticated even before Keycloak is ready', () => {
+  it('shows Sign in when unauthenticated', () => {
     const wrapper = mount(App, { global: { stubs: { RouterView: true } } });
-
-    // The sign-in affordance must not be gated on `ready`: if check-sso never
-    // resolves, the button would be hidden and the user could never log in.
     const group = wrapper.find('goa-button-group');
     expect(group.exists()).toBe(true);
     expect(group.html()).toContain('Sign in');
   });
+
+  it('Sign in click calls keycloak.login (guards against lost reactivity)', async () => {
+    // The bug: destructuring useKeycloak() froze `keycloak` at undefined, so
+    // login() was a permanent no-op. Reactive access must reach the instance.
+    const kc = useKeycloak();
+    const wrapper = mount(App, { global: { stubs: { RouterView: true } } });
+    const btn = wrapper.findAll('goa-button').find((b) => b.text().includes('Sign in'));
+    await btn?.trigger('_click');
+    expect(kc.keycloak?.login).toHaveBeenCalled();
+  });
 });

package/src/generators/vue-app/files/src/App.vue__tmpl__

@@ -2,24 +2,28 @@
 import { useKeycloak } from '@dsb-norge/vue-keycloak-js';
 import { RouterView } from 'vue-router';
 
-const { authenticated, fullName, keycloak } = useKeycloak();
+// Keep the reactive instance — do NOT destructure. useKeycloak() returns a
+// readonly(reactive()); destructuring snapshots each field at setup time, so
+// `keycloak` would be frozen at its initial `undefined` (login() a no-op) and
+// `authenticated` would never flip. Access fields on `kc` to stay reactive.
+const kc = useKeycloak();
 
-function login() { keycloak?.login(); }
-function logout() { keycloak?.logout({ redirectUri: window.location.origin }); }
+function login() { kc.keycloak?.login(); }
+function logout() { kc.keycloak?.logout({ redirectUri: window.location.origin }); }
 </script>
 
 <template>
   <goa-microsite-header type="alpha" />
   <goa-app-header url="/" heading="<%= projectName %>">
     <goa-button-group alignment="end">
-      <span v-if="authenticated && fullName">{{ fullName }}</span>
-      <!-- Gate on !authenticated only, not `ready`: if Keycloak's check-sso
-           doesn't resolve (e.g. the silent-SSO iframe is blocked), we still
-           want the sign-in affordance — login() does a full redirect anyway. -->
-      <goa-button v-if="!authenticated" type="tertiary" @_click="login">
+      <span v-if="kc.authenticated && kc.fullName">{{ kc.fullName }}</span>
+      <!-- Gate on !authenticated only, never on `ready`: with no load-time SSO
+           check, `ready` flips true immediately but stays informational — the
+           sign-in affordance must always show until the user is authenticated. -->
+      <goa-button v-if="!kc.authenticated" type="tertiary" @_click="login">
         Sign in
       </goa-button>
-      <goa-button v-if="authenticated" type="tertiary" @_click="logout">
+      <goa-button v-if="kc.authenticated" type="tertiary" @_click="logout">
         Sign out
       </goa-button>
     </goa-button-group>

package/src/generators/vue-app/files/src/main.ts__tmpl__

@@ -18,10 +18,23 @@ app.use(keycloakPlugin, {
     realm: environment.access.realm,
     clientId: environment.access.client_id,
   },
+  // No load-time SSO check and no hidden iframes. keycloak-js's silent-SSO
+  // (silentCheckSsoRedirectUri) and login-status (checkLoginIframe) iframes both
+  // wait on an untimed postMessage that never arrives when third-party cookies are
+  // blocked (common cross-origin, e.g. behind the ADSP gateway) — init() then
+  // hangs forever, the wrapper never populates its `keycloak` ref, and login()
+  // stays a permanent no-op. So we disable every iframe: checkLoginIframe:false
+  // drops the login-status iframe, omitting silentCheckSsoRedirectUri drops the
+  // silent iframe (that combination also skips the 3p-cookie probe iframe), and an
+  // empty onLoad skips the load-time check entirely — the wrapper requires onLoad
+  // to be a string, and keycloak-js treats a falsy onLoad as "no check". Result:
+  // init settles immediately as anonymous and Sign in redirects on demand. To
+  // auto-detect an existing session where the environment allows it, set
+  // onLoad: 'check-sso' (adds a prompt=none redirect round-trip on every load).
   init: {
-    onLoad: 'check-sso',
+    onLoad: '',
     pkceMethod: 'S256',
-    silentCheckSsoRedirectUri: `${window.location.origin}/silent-check-sso.html`,
+    checkLoginIframe: false,
   },
 });
 

package/src/generators/vue-app/files/src/router/index.ts__tmpl__

@@ -16,10 +16,12 @@ const router = createRouter({
 
 router.beforeEach((to) => {
   if (to.meta.requiresAuth) {
-    const { authenticated, ready, keycloak } = useKeycloak();
-    if (!ready) return true;
-    if (!authenticated) {
-      keycloak?.login({ redirectUri: window.location.origin + to.fullPath });
+    // Read fields off the reactive instance (don't destructure) — consistent with
+    // the views and safe if this ever moves out of the per-navigation callback.
+    const kc = useKeycloak();
+    if (!kc.ready) return true;
+    if (!kc.authenticated) {
+      kc.keycloak?.login({ redirectUri: window.location.origin + to.fullPath });
       return false;
     }
   }

package/src/generators/vue-app/files/src/views/HomeView.vue__tmpl__

@@ -1,8 +1,11 @@
 <script setup lang="ts">
-import { ref, onMounted } from 'vue';
+import { ref, onMounted, watch } from 'vue';
 import { useKeycloak } from '@dsb-norge/vue-keycloak-js';
 
-const { authenticated, keycloak } = useKeycloak();
+// Keep the reactive instance — do NOT destructure (see App.vue): a destructured
+// `authenticated`/`keycloak` freezes at its setup-time value, so the private
+// fetch below would never see the user sign in and the bearer token stays undefined.
+const kc = useKeycloak();
 const publicResource = ref('Not retrieved — is the backend service running?');
 const privateResource = ref('Not retrieved — sign in first.');
 
@@ -14,20 +17,27 @@ onMounted(async () => {
   } catch {
     publicResource.value = 'Error loading public resource.';
   }
+});
 
-  if (authenticated) {
+// React to authentication (which settles asynchronously and may flip after mount,
+// e.g. on return from the login redirect) rather than reading it once on mount.
+watch(
+  () => kc.authenticated,
+  async (authenticated) => {
+    if (!authenticated) return;
     try {
-      await keycloak?.updateToken(30);
+      await kc.keycloak?.updateToken(30);
       const res = await fetch('/api/v1/private', {
-        headers: { Authorization: `Bearer ${keycloak?.token}` },
+        headers: { Authorization: `Bearer ${kc.keycloak?.token}` },
       });
       const data = await res.json();
       privateResource.value = data.message;
     } catch {
       privateResource.value = 'Error loading private resource.';
     }
-  }
-});
+  },
+  { immediate: true }
+);
 </script>
 
 <template>

package/src/generators/vue-app/files/src/views/ProtectedView.vue__tmpl__

@@ -1,14 +1,18 @@
 <script setup lang="ts">
+import { computed } from 'vue';
 import { useKeycloak } from '@dsb-norge/vue-keycloak-js';
 
-const { fullName, tokenParsed } = useKeycloak();
-const userEmail = tokenParsed?.email ?? '';
+// Keep the reactive instance — do NOT destructure (see App.vue): fullName and
+// tokenParsed populate asynchronously once Keycloak settles, so a destructured
+// snapshot would freeze them at undefined and the page would render blank.
+const kc = useKeycloak();
+const userEmail = computed(() => kc.tokenParsed?.email ?? '');
 </script>
 
 <template>
   <section>
     <h2>Protected page</h2>
-    <p>You are signed in as <strong>{{ fullName }}</strong> ({{ userEmail }}).</p>
+    <p>You are signed in as <strong>{{ kc.fullName }}</strong> ({{ userEmail }}).</p>
     <router-link to="/">← Back to home</router-link>
   </section>
 </template>

package/src/generators/vue-app/vue-app.js

@@ -66,8 +66,9 @@ function default_1(host, options) {
         (0, devkit_1.addDependenciesToPackageJson)(host, {
             '@abgov/design-tokens': '1.8.0',
             '@abgov/web-components': '1.39.3',
+            // keycloak-js is a transitive dependency of @dsb-norge/vue-keycloak-js;
+            // don't pin it directly or the versions diverge into two copies.
             '@dsb-norge/vue-keycloak-js': '^3.0.0',
-            'keycloak-js': '^23.0.7',
             'pinia': '^2.0.0',
             'vue-router': '^4.0.0',
         }, {
@@ -101,8 +102,8 @@ function default_1(host, options) {
         if (addedProxy && ((_a = config.targets.serve) === null || _a === void 0 ? void 0 : _a.options)) {
             config.targets.serve.options = Object.assign(Object.assign({}, config.targets.serve.options), { proxyConfig: `${normalizedOptions.projectRoot}/vite.proxy.json` });
         }
-        // nginx.conf and silent-check-sso.html live in the Vite publicDir
-        // (<projectRoot>/public) so they are emitted to the build output root — the
+        // nginx.conf lives in the Vite publicDir
+        // (<projectRoot>/public) so it's emitted to the build output root — the
         // @nx/vite:build executor ignores webpack-style `assets`. Pin outputPath to
         // the workspace-root dist so it matches the vite config's outDir and the
         // generated Dockerfile's COPY path.

package/src/generators/vue-app/vue-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"vue-app.js","sourceRoot":"","sources":["../../../../../../packages/nx-adsp/src/generators/vue-app/vue-app.ts"],"names":[],"mappings":";;AAgEA,4BA8KC;;AA9OD,wCAAyE;AACzE,6CAA6E;AAC7E,+DAA6G;AAC7G,+DAA4D;AAC5D,iDAAiG;AACjG,uCAYoB;AACpB,6BAA6B;AAG7B,SAAe,gBAAgB,CAAC,IAAU,EAAE,OAAe;;QACzD,MAAM,WAAW,GAAG,IAAA,cAAK,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACjD,MAAM,WAAW,GAAG,GAAG,IAAA,2BAAkB,EAAC,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;QACzE,MAAM,kBAAkB,GAAG,cAAc,WAAW,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAoB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/C,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,OAAO,CAAC,KAAK;gBACf,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;gBACjB,CAAC,CAAC,EAAE,CAAC;QACP,uCAAY,OAAO,KAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,IAAG;IAC1F,CAAC;CAAA;AAED,SAAS,QAAQ,CAAC,IAAU,EAAE,OAAyB;;IACrD,MAAM,eAAe,iDAChB,OAAO,GACP,OAAO,CAAC,IAAI,KACf,cAAc,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC,WAAW,CAAC,EACnD,aAAa,EAAE,MAAA,OAAO,CAAC,aAAa,mCAAI,IAAI,EAC5C,IAAI,EAAE,EAAE,GACT,CAAC;IACF,IAAA,sBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAEzF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE;YACzE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG;gBACZ,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,cAAc,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7F,MAAM,EAAE,WAAW,CAAC,QAAQ,KAAK,QAAQ;gBACzC,YAAY,EAAE,KAAK;gBACnB,WAAW,EAAE,EAAE;aAChB,CAAC;YACF,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC5E,CAAC;YACD,uCAAY,SAAS,KAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAG;QACxD,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,IAAA,kBAAS,EAAC,IAAI,EAAE,GAAG,OAAO,CAAC,WAAW,kBAAkB,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,mBAA+B,IAAU,EAAE,OAAe;;;QACxD,MAAM,iBAAiB,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEhE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,MAAM,qCAAO,SAAS,GAAE,KAAK,CAAC,GAAG,EAAE;YAC3E,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,EAAE;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,QAAQ;YACxB,aAAa,EAAE,MAAM;YACrB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,iBAAiB,CAAC,WAAW;SACzC,CAAC,CAAC;QAEH,IAAA,qCAA4B,EAC1B,IAAI,EACJ;YACE,sBAAsB,EAAE,OAAO;YAC/B,uBAAuB,EAAE,QAAQ;YACjC,4BAA4B,EAAE,QAAQ;YACtC,aAAa,EAAE,SAAS;YACxB,OAAO,EAAE,QAAQ;YACjB,YAAY,EAAE,QAAQ;SACvB,EACD;YACE,wBAAwB,EAAE,QAAQ;YAClC,0BAA0B,EAAE,QAAQ;SACrC,CACF,CAAC;QAEF,gFAAgF;QAChF,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,wEAAwE;QACxE,4EAA4E;QAC5E,KAAK,MAAM,CAAC,IAAI;YACd,aAAa;YACb,iBAAiB;YACjB,qBAAqB;YACrB,uBAAuB;YACvB,+BAA+B;YAC/B,yBAAyB;YACzB,iBAAiB;SAClB,EAAE,CAAC;YACF,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAErD,IAAA,+BAAqB,EAAC,IAAI,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAA,2BAAiB,EAAC,IAAI,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,IAAA,iCAAwB,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAE5D,4EAA4E;QAC5E,IAAI,UAAU,KAAI,MAAA,MAAM,CAAC,OAAO,CAAC,KAAK,0CAAE,OAAO,CAAA,EAAE,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,mCACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAC/B,WAAW,EAAE,GAAG,iBAAiB,CAAC,WAAW,kBAAkB,GAChE,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,oCAAoC;QACpC,IAAI,MAAA,MAAM,CAAC,OAAO,CAAC,KAAK,0CAAE,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,mCACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAC/B,UAAU,EAAE,QAAQ,iBAAiB,CAAC,WAAW,EAAE,GACpD,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,iBAAiB,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,IAAA,cAAK,EAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC;YACtE,MAAM,KAAK,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACtD,IAAI,CAAC;oBACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC;gBACzD,CAAC;gBAAC,WAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,IAAI,GAAG;gBACZ,GAAG,CAAC,MAAA,MAAM,CAAC,IAAI,mCAAI,EAAE,CAAC;gBACtB,sBAAsB,aAAa,IAAI,IAAI,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,IAAA,mCAA0B,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAEvD,IAAA,0BAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;QAExB,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,MAAA,iBAAiB,CAAC,IAAI,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC;YAC9E,MAAM,QAAQ,GAAG,WAAW,iBAAiB,CAAC,IAAI,CAAC,MAAM,IAAI,iBAAiB,CAAC,WAAW,EAAE,CAAC;YAC7F,MAAM,IAAA,mCAAkB,EACtB,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,EACvC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAClC,QAAQ,EACR,WAAW,CACZ,CAAC;YACF,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,MAAM,IAAA,qCAAoB,EACxB,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,EACvC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAClC,QAAQ,EACR,OAAO,CAAC,eAAe,EACvB,WAAW,CACZ,CAAC;gBACF,MAAM,IAAA,sCAAqB,EACzB,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,EACvC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAClC,QAAQ,EACR,OAAO,CAAC,eAAe,EACvB,cAAc,EACd,WAAW,CACZ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,MAAA,iBAAiB,CAAC,IAAI,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,cAAc,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YAC3F,MAAM,MAAM,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,cAAc,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,sBAAsB,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YACrG,MAAM,aAAa,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,kCAAkC,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YACtH,MAAM,IAAA,kCAA0B,EAAC,MAAM,IAAA,oBAAY,EACjD,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,EAC1C,WAAW,EACX;gBACE,WAAW,EAAE,iBAAiB,CAAC,WAAW;gBAC1C,WAAW,EAAE,SAAS;gBACtB,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM;gBACrC,aAAa,EAAE,+BAAc;gBAC7B,aAAa,EAAE;oBACb,aAAa,EAAE,MAAM;oBACrB,aAAa,EAAE,MAAM;oBACrB,qBAAqB,EAAE,QAAQ;oBAC/B,iCAAiC,EAAE,aAAa;iBACjD;aACF,EACD,IAAI,EACJ,iBAAiB,CAAC,WAAW,CAC9B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAA,2BAAmB,EAAC,IAAI,kCACzB,iBAAiB,KACpB,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,iBAAiB,CAAC,WAAW,IACtC,CAAC;QAEH,OAAO,GAAG,EAAE;YACV,IAAA,4BAAmB,EAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;IACJ,CAAC;CAAA"}
+{"version":3,"file":"vue-app.js","sourceRoot":"","sources":["../../../../../../packages/nx-adsp/src/generators/vue-app/vue-app.ts"],"names":[],"mappings":";;AAgEA,4BA+KC;;AA/OD,wCAAyE;AACzE,6CAA6E;AAC7E,+DAA6G;AAC7G,+DAA4D;AAC5D,iDAAiG;AACjG,uCAYoB;AACpB,6BAA6B;AAG7B,SAAe,gBAAgB,CAAC,IAAU,EAAE,OAAe;;QACzD,MAAM,WAAW,GAAG,IAAA,cAAK,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACjD,MAAM,WAAW,GAAG,GAAG,IAAA,2BAAkB,EAAC,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;QACzE,MAAM,kBAAkB,GAAG,cAAc,WAAW,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAoB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/C,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,OAAO,CAAC,KAAK;gBACf,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;gBACjB,CAAC,CAAC,EAAE,CAAC;QACP,uCAAY,OAAO,KAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,IAAG;IAC1F,CAAC;CAAA;AAED,SAAS,QAAQ,CAAC,IAAU,EAAE,OAAyB;;IACrD,MAAM,eAAe,iDAChB,OAAO,GACP,OAAO,CAAC,IAAI,KACf,cAAc,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC,WAAW,CAAC,EACnD,aAAa,EAAE,MAAA,OAAO,CAAC,aAAa,mCAAI,IAAI,EAC5C,IAAI,EAAE,EAAE,GACT,CAAC;IACF,IAAA,sBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAEzF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE;YACzE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG;gBACZ,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,cAAc,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7F,MAAM,EAAE,WAAW,CAAC,QAAQ,KAAK,QAAQ;gBACzC,YAAY,EAAE,KAAK;gBACnB,WAAW,EAAE,EAAE;aAChB,CAAC;YACF,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC5E,CAAC;YACD,uCAAY,SAAS,KAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAG;QACxD,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,IAAA,kBAAS,EAAC,IAAI,EAAE,GAAG,OAAO,CAAC,WAAW,kBAAkB,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,mBAA+B,IAAU,EAAE,OAAe;;;QACxD,MAAM,iBAAiB,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEhE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,MAAM,qCAAO,SAAS,GAAE,KAAK,CAAC,GAAG,EAAE;YAC3E,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,EAAE;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,QAAQ;YACxB,aAAa,EAAE,MAAM;YACrB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,iBAAiB,CAAC,WAAW;SACzC,CAAC,CAAC;QAEH,IAAA,qCAA4B,EAC1B,IAAI,EACJ;YACE,sBAAsB,EAAE,OAAO;YAC/B,uBAAuB,EAAE,QAAQ;YACjC,wEAAwE;YACxE,iEAAiE;YACjE,4BAA4B,EAAE,QAAQ;YACtC,OAAO,EAAE,QAAQ;YACjB,YAAY,EAAE,QAAQ;SACvB,EACD;YACE,wBAAwB,EAAE,QAAQ;YAClC,0BAA0B,EAAE,QAAQ;SACrC,CACF,CAAC;QAEF,gFAAgF;QAChF,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,wEAAwE;QACxE,4EAA4E;QAC5E,KAAK,MAAM,CAAC,IAAI;YACd,aAAa;YACb,iBAAiB;YACjB,qBAAqB;YACrB,uBAAuB;YACvB,+BAA+B;YAC/B,yBAAyB;YACzB,iBAAiB;SAClB,EAAE,CAAC;YACF,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAErD,IAAA,+BAAqB,EAAC,IAAI,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAA,2BAAiB,EAAC,IAAI,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,IAAA,iCAAwB,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAE5D,4EAA4E;QAC5E,IAAI,UAAU,KAAI,MAAA,MAAM,CAAC,OAAO,CAAC,KAAK,0CAAE,OAAO,CAAA,EAAE,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,mCACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAC/B,WAAW,EAAE,GAAG,iBAAiB,CAAC,WAAW,kBAAkB,GAChE,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,wEAAwE;QACxE,4EAA4E;QAC5E,yEAAyE;QACzE,oCAAoC;QACpC,IAAI,MAAA,MAAM,CAAC,OAAO,CAAC,KAAK,0CAAE,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,mCACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAC/B,UAAU,EAAE,QAAQ,iBAAiB,CAAC,WAAW,EAAE,GACpD,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,iBAAiB,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,IAAA,cAAK,EAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC;YACtE,MAAM,KAAK,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACtD,IAAI,CAAC;oBACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC;gBACzD,CAAC;gBAAC,WAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,IAAI,GAAG;gBACZ,GAAG,CAAC,MAAA,MAAM,CAAC,IAAI,mCAAI,EAAE,CAAC;gBACtB,sBAAsB,aAAa,IAAI,IAAI,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,IAAA,mCAA0B,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAEvD,IAAA,0BAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;QAExB,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,MAAA,iBAAiB,CAAC,IAAI,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC;YAC9E,MAAM,QAAQ,GAAG,WAAW,iBAAiB,CAAC,IAAI,CAAC,MAAM,IAAI,iBAAiB,CAAC,WAAW,EAAE,CAAC;YAC7F,MAAM,IAAA,mCAAkB,EACtB,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,EACvC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAClC,QAAQ,EACR,WAAW,CACZ,CAAC;YACF,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,MAAM,IAAA,qCAAoB,EACxB,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,EACvC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAClC,QAAQ,EACR,OAAO,CAAC,eAAe,EACvB,WAAW,CACZ,CAAC;gBACF,MAAM,IAAA,sCAAqB,EACzB,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,EACvC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAClC,QAAQ,EACR,OAAO,CAAC,eAAe,EACvB,cAAc,EACd,WAAW,CACZ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,MAAA,iBAAiB,CAAC,IAAI,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,cAAc,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YAC3F,MAAM,MAAM,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,cAAc,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,sBAAsB,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YACrG,MAAM,aAAa,GAAG,MAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,kCAAkC,CAAC,0CAAE,QAAQ,EAAE,mCAAI,EAAE,CAAC;YACtH,MAAM,IAAA,kCAA0B,EAAC,MAAM,IAAA,oBAAY,EACjD,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,EAC1C,WAAW,EACX;gBACE,WAAW,EAAE,iBAAiB,CAAC,WAAW;gBAC1C,WAAW,EAAE,SAAS;gBACtB,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM;gBACrC,aAAa,EAAE,+BAAc;gBAC7B,aAAa,EAAE;oBACb,aAAa,EAAE,MAAM;oBACrB,aAAa,EAAE,MAAM;oBACrB,qBAAqB,EAAE,QAAQ;oBAC/B,iCAAiC,EAAE,aAAa;iBACjD;aACF,EACD,IAAI,EACJ,iBAAiB,CAAC,WAAW,CAC9B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAA,2BAAmB,EAAC,IAAI,kCACzB,iBAAiB,KACpB,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,iBAAiB,CAAC,WAAW,IACtC,CAAC;QAEH,OAAO,GAAG,EAAE;YACV,IAAA,4BAAmB,EAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;IACJ,CAAC;CAAA"}

package/src/generators/vue-app/vue-app.spec.ts

@@ -36,9 +36,8 @@ describe('Vue App Generator', () => {
     await generator(host, options);
     const config = readProjectConfiguration(host, 'test');
     expect(config.root).toBe('apps/test');
-    // nginx.conf + silent-check-sso live in the Vite publicDir so they end up in the build output.
+    // nginx.conf lives in the Vite publicDir so it ends up in the build output.
     expect(host.exists('apps/test/public/nginx.conf')).toBeTruthy();
-    expect(host.exists('apps/test/public/silent-check-sso.html')).toBeTruthy();
     expect(host.exists('apps/test/src/main.ts')).toBeTruthy();
     expect(host.exists('apps/test/src/App.vue')).toBeTruthy();
     expect(host.exists('apps/test/src/router/index.ts')).toBeTruthy();
@@ -50,6 +49,48 @@ describe('Vue App Generator', () => {
     expect(config.targets.build.options.outputPath).toBe('dist/apps/test');
   }, 30000);
 
+  it('inits Keycloak with no hidden iframes so init never hangs', async () => {
+    await generator(host, options);
+    // Strip // comments — they legitimately reference the disabled iframe options
+    // to explain their absence; assert against the actual init code.
+    const code = host
+      .read('apps/test/src/main.ts')
+      .toString()
+      .split('\n')
+      .filter((l) => !l.trim().startsWith('//'))
+      .join('\n');
+    // keycloak-js's silent-SSO (silentCheckSsoRedirectUri) and login-status
+    // (checkLoginIframe) iframes both wait on an untimed postMessage that hangs
+    // when third-party cookies are blocked, leaving keycloak.login() a no-op. We
+    // disable both and skip the load-time check (empty onLoad) so init settles.
+    expect(code).not.toContain('silentCheckSsoRedirectUri');
+    expect(code).toContain('checkLoginIframe: false');
+    expect(code).toContain("onLoad: ''");
+    expect(code).toContain("pkceMethod: 'S256'");
+    // the now-unused silent-check-sso.html is no longer generated
+    expect(host.exists('apps/test/public/silent-check-sso.html')).toBeFalsy();
+  }, 30000);
+
+  it('reads Keycloak fields off the reactive instance without destructuring', async () => {
+    await generator(host, options);
+    // The Sign in no-op bug: destructuring useKeycloak() (a readonly(reactive()))
+    // froze `keycloak` at undefined so login() never fired. Every consumer must
+    // keep the instance and read fields off it.
+    for (const file of [
+      'apps/test/src/App.vue',
+      'apps/test/src/views/HomeView.vue',
+      'apps/test/src/views/ProtectedView.vue',
+      'apps/test/src/router/index.ts',
+    ]) {
+      const code = host.read(file).toString();
+      expect(code).toContain('= useKeycloak()');
+      // no destructuring assignment off useKeycloak()
+      expect(code).not.toMatch(/const\s*\{[^}]*\}\s*=\s*useKeycloak\(\)/);
+    }
+    const app = host.read('apps/test/src/App.vue').toString();
+    expect(app).toContain('kc.keycloak?.login()');
+  }, 30000);
+
   it('index.html is at the Vite entry root and its mount target matches main.ts', async () => {
     await generator(host, options);
     // Vite's entry is <projectRoot>/index.html, not src/index.html — a template

package/src/generators/vue-app/files/public/silent-check-sso.html__tmpl__

@@ -1,5 +0,0 @@
-<html>
-<body>
-<script>parent.postMessage(location.href, location.origin);</script>
-</body>
-</html>