@salesforcedevs/dx-components 0.59.0-avatar-button-5 → 0.59.0-avatar-button-8

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforcedevs/dx-components",
-    "version": "0.59.0-avatar-button-5",
+    "version": "0.59.0-avatar-button-8",
     "description": "DX Lightning web components",
     "license": "MIT",
     "engines": {

package/src/modules/dx/avatarButton/avatarButton.ts

@@ -5,9 +5,18 @@ const TBID_SETTINGS_URL = `${TBID_BASE_URL}/settings`;
 const TBID_PROFILE_URL = `${TBID_BASE_URL}/id`;
 const TBID_API_BASE_URL = "https://development.developer.salesforce.com/tbid";
 const TBID_API_LOGOUT_URL = `${TBID_API_BASE_URL}/logout`;
-const TBID_API_USERINFO_URL = `https://development.developer.salesforce.com/tbid/userinfo`;
+const TBID_API_USERINFO_URL = `${TBID_API_BASE_URL}/userinfo`;
 const TBID_API_LOGIN_URL = `${TBID_API_BASE_URL}/dologin`;
-// const TBID_LOGOUT_URL = `${TBID_BASE_URL}/services/auth/idp/oidc/logout`;
+const TBID_API_TOKEN_URL = `${TBID_API_BASE_URL}/token`;
+
+declare global {
+    interface Window {
+        SFIDWidget?: {
+            logout(): void;
+            login(): void;
+        };
+    }
+}
 
 export interface UserInfo {
     avatarImgSrc?: string;
@@ -31,9 +40,14 @@ export default class AvatarButton extends LightningElement {
     private isLoading = false;
     private settingsUrl = TBID_SETTINGS_URL;
     private profileUrl = TBID_PROFILE_URL;
-    private loginUrl = TBID_API_LOGIN_URL;
     private _didReceiveUserInfo = false;
 
+    private get loginUrl() {
+        return `${TBID_API_LOGIN_URL}?startURL=${window.encodeURIComponent(
+            window.location.href
+        )}`;
+    }
+
     private get isLoggedIn() {
         return this._didReceiveUserInfo;
     }
@@ -59,16 +73,16 @@ export default class AvatarButton extends LightningElement {
         this.isLoading = false;
         this.updateAvatarWithUserInfo({}); // clear old info
 
-        fetch(`${TBID_API_LOGOUT_URL}?isSsoLogout=${isSsoLogout}`); // no need to await this
-    };
-
-    // This will only be called for "seamless SSO" login by the embedded login widget (SFIDWidget) on the website, if it exists.
-    private handleSsoLogin = (event: Event) => {
-        const userInfo = (event as CustomEvent).detail;
-        if (userInfo) {
-            this.updateAvatarWithUserInfo(userInfo);
-            this._didReceiveUserInfo = true;
+        if (!isSsoLogout && window.SFIDWidget) {
+            // If the SFIDWidget is around and logout was not *already* triggered by SSO logout,
+            // defer to the SFIDWidget. This will ensure that the SSO session is logged out as
+            // well.
+            window.SFIDWidget.logout();
         }
+
+        // Always clear the session token; if not SSO logout, this will also revoke the token with
+        // TBID; if SSO logout, that step is already taken care of
+        fetch(`${TBID_API_LOGOUT_URL}?isSsoLogout=${isSsoLogout}`); // no need to await this
     };
 
     // This will only be called for "seamless SSO" login by the embedded login widget (SFIDWidget) on the website, if it exists.
@@ -76,6 +90,46 @@ export default class AvatarButton extends LightningElement {
 
     private handleComponentLogout = this.handleLogout.bind(this, false);
 
+    // This will only be called for "seamless SSO" login by the embedded login widget (SFIDWidget) on the website, if it exists.
+    private handleSsoLogin = async (event: Event) => {
+        const token = (event as CustomEvent).detail.userInfo?.access_token;
+
+        // `token` should always be defined if an SSO login occurs, but we check for extra safety
+        if (token) {
+            this.isLoading = true;
+            // If an SSO login occurred and we have an SSO access token, we want to start using
+            // it rather than some other non-linked access token, for the "seamless SSO"
+            // experience
+            try {
+                await fetch(TBID_API_TOKEN_URL, {
+                    method: "POST",
+                    body: JSON.stringify({
+                        token
+                    })
+                });
+            } catch (ex) {
+                // If the request fails for some reason, fall back to whatever we've got
+                this.updateAvatarWithUserInfo(this.userInfo);
+                console.error(ex);
+                return;
+            }
+        }
+
+        // Unfortunately, the user info provided by the SFIDWidget on SSO login does not contain
+        // image URLs, so we also have to request it manually again
+        this.requestUserInfo();
+    };
+
+    private handleComponentLogin = () => {
+        if (window.SFIDWidget) {
+            // If the SFIDWidget is around, defer to it for login. This will ensure that the SSO
+            // session is used if possible.
+            window.SFIDWidget.login();
+        } else {
+            window.location.href = this.loginUrl;
+        }
+    };
+
     private updateAvatarWithUserInfo = (userInfo: any) => {
         if (!userInfo) {
             return;
@@ -85,7 +139,7 @@ export default class AvatarButton extends LightningElement {
         this.userInfo.firstName = userInfo.given_name;
         this.userInfo.lastName = userInfo.family_name;
         this.userInfo.username = userInfo.preferred_username;
-        // TODO: Consider displaying initials if no photo. Is there always a photo?
+        // TODO: Consider displaying initials if no photo. Is there always a photo even if just a default one?
     };
 
     private requestUserInfo = async () => {