@salesforce/webapp-experimental 1.25.2 → 1.27.0

package/dist/proxy/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/proxy/handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAM/D;;GAEG;AACH,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,YAAY;IAE5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,cAAc,CAAC,EAAE,CAAC,cAAc,EAAE,OAAO,KAAK,IAAI,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAC1B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,CAAC,EAAE,MAAM,IAAI,KACb,OAAO,CAAC,IAAI,CAAC,CAAC;AA6UnB;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,cAAc,EACxB,OAAO,CAAC,EAAE,OAAO,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,YAAY,GACpB,YAAY,CAGd"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/proxy/handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAM/D;;GAEG;AACH,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAO/D;;GAEG;AACH,MAAM,WAAW,YAAY;IAE5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,cAAc,CAAC,EAAE,CAAC,cAAc,EAAE,OAAO,KAAK,IAAI,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAC1B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,CAAC,EAAE,MAAM,IAAI,KACb,OAAO,CAAC,IAAI,CAAC,CAAC;AAqanB;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,cAAc,EACxB,OAAO,CAAC,EAAE,OAAO,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,YAAY,GACpB,YAAY,CAGd"}

package/dist/proxy/handler.js

@@ -16,6 +16,10 @@ export const WEBAPP_HEALTH_CHECK_PARAM = "sfProxyHealthCheck";
  * Response header indicating the proxy is active
  */
 export const WEBAPP_PROXY_HEADER = "X-Salesforce-WebApp-Proxy";
+/**
+ * Endpoint for Lightning Out frontdoor URL generation
+ */
+const LIGHTNING_OUT_SINGLE_ACCESS_PATH = "/services/oauth2/singleaccess";
 /**
  * Handles all proxy routing and forwarding for WebApps
  */
@@ -41,6 +45,10 @@ class WebAppProxyHandler {
             return;
         }
         let pathname = url.pathname;
+        if (pathname === "/__lo/frontdoor") {
+            await this.handleLightningOutFrontdoor(req, res, url);
+            return;
+        }
         if (this.options?.debug) {
             console.log(`[webapps-proxy] ${req.method} ${pathname}`);
         }
@@ -104,6 +112,73 @@ class WebAppProxyHandler {
             message: "No default Salesforce org found. Run 'sf org login web --set-default' to authenticate.",
         }));
     }
+    sendJson(res, statusCode, body) {
+        res.writeHead(statusCode, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(body));
+    }
+    async handleLightningOutFrontdoor(req, res, _url) {
+        try {
+            if (!this.orgInfo) {
+                this.sendNoOrgError(res);
+                return;
+            }
+            if (req.method && req.method !== "GET") {
+                this.sendJson(res, 405, { error: "METHOD_NOT_ALLOWED", message: "Use GET" });
+                return;
+            }
+            const { rawInstanceUrl, accessToken, orgId } = this.orgInfo;
+            const frontdoorUrl = await this.fetchLightningOutFrontdoorUrl(rawInstanceUrl, accessToken);
+            if (!frontdoorUrl) {
+                this.sendJson(res, 502, {
+                    error: "FRONTDOOR_FAILED",
+                    message: "No frontdoor URL returned from Salesforce",
+                });
+                return;
+            }
+            this.sendJson(res, 200, {
+                frontdoorUrl,
+                instanceUrl: rawInstanceUrl,
+                orgId,
+            });
+        }
+        catch (error) {
+            console.error("[webapps-proxy] Frontdoor request failed:", error);
+            this.sendJson(res, 502, {
+                error: "GATEWAY_ERROR",
+                message: "Failed to generate frontdoor URL",
+            });
+        }
+    }
+    async fetchLightningOutFrontdoorUrl(rawInstanceUrl, accessToken) {
+        let baseUrl = rawInstanceUrl.replace(/\/$/, "");
+        let response = await fetch(`${baseUrl}${LIGHTNING_OUT_SINGLE_ACCESS_PATH}`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+        });
+        if (response.status === 401 || response.status === 403) {
+            const updatedOrgInfo = await this.refreshToken();
+            if (!updatedOrgInfo) {
+                throw new Error("Failed to refresh token");
+            }
+            baseUrl = updatedOrgInfo.rawInstanceUrl.replace(/\/$/, "");
+            response = await fetch(`${baseUrl}${LIGHTNING_OUT_SINGLE_ACCESS_PATH}`, {
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${updatedOrgInfo.accessToken}`,
+                    "Content-Type": "application/x-www-form-urlencoded",
+                },
+            });
+        }
+        if (!response.ok) {
+            const errorBody = await response.text();
+            throw new Error(`Frontdoor exchange failed: ${response.status} ${errorBody}`);
+        }
+        const data = (await response.json());
+        return data.frontdoor_uri ?? null;
+    }
     async handleSalesforceApi(req, res) {
         try {
             if (!this.orgInfo) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@salesforce/webapp-experimental",
   "description": "[experimental] Core package for Salesforce Web Applications",
-  "version": "1.25.2",
+  "version": "1.27.0",
   "license": "SEE LICENSE IN LICENSE.txt",
   "type": "module",
   "main": "./dist/index.js",
@@ -55,5 +55,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "6e4299053c2bdad6b1eb6d81c983368bd539e711"
+  "gitHead": "b162807f5062f6aee52605127b787de508035fc9"
 }