@micha.bigler/ui-core-micha 2.1.16 → 2.1.18

package/src/utils/authService.js

@@ -135,12 +135,60 @@ export async function authenticateMfaWithPasskey() {
     return authenticateWithMFA({ credential: credentialJson });
 }
 
-export function startSocialLogin(provider) {
+function getCsrfTokenFromCookie() {
+  if (typeof document === 'undefined' || !document.cookie) return null;
+  const match = document.cookie.match(/(?:^|; )csrftoken=([^;]+)/);
+  return match ? decodeURIComponent(match[1]) : null;
+}
+
+function submitSocialRedirectForm({ provider, callbackUrl, csrfToken }) {
+  const form = document.createElement('form');
+  form.method = 'POST';
+  form.action = `${HEADLESS_BASE}/auth/provider/redirect`;
+  form.style.display = 'none';
+
+  const fields = {
+    provider,
+    process: 'login',
+    callback_url: callbackUrl,
+    csrfmiddlewaretoken: csrfToken,
+  };
+
+  Object.entries(fields).forEach(([name, value]) => {
+    const input = document.createElement('input');
+    input.type = 'hidden';
+    input.name = name;
+    input.value = String(value);
+    form.appendChild(input);
+  });
+
+  document.body.appendChild(form);
+  form.submit();
+}
+
+export async function startSocialLogin(provider) {
   if (typeof window === 'undefined') {
     throw normaliseApiError(
       new Error('Auth.SOCIAL_LOGIN_NOT_IN_BROWSER'), 
       'Auth.SOCIAL_LOGIN_NOT_IN_BROWSER'
     );
   }
-  window.location.href = `/accounts/${provider}/login/?process=login`;
-}
+
+  try {
+    // Ensures csrftoken cookie exists before form POST.
+    await apiClient.get('/api/csrf/');
+  } catch {
+    // Continue; token might already be present.
+  }
+
+  const csrfToken = getCsrfTokenFromCookie();
+  if (!csrfToken) {
+    throw normaliseApiError(
+      new Error('Auth.SOCIAL_LOGIN_FAILED'),
+      'Auth.SOCIAL_LOGIN_FAILED',
+    );
+  }
+
+  const callbackUrl = `${window.location.origin}/login`;
+  submitSocialRedirectForm({ provider, callbackUrl, csrfToken });
+}