@spidy092/auth-client 1.0.1 → 1.0.3

package/core.js

@@ -3,10 +3,10 @@ import { setToken, clearToken, getToken } from './token';
 import { getConfig } from './config';
 
 export function login(clientKeyArg, redirectUriArg, stateArg) {
-  const { 
+  const {
     clientKey: defaultClientKey, 
     authBaseUrl, 
-    redirectUri: defaultRedirectUri,
+    redirectUri: defaultRedirectUri, 
     accountUiUrl 
   } = getConfig();
 
@@ -18,22 +18,32 @@ export function login(clientKeyArg, redirectUriArg, stateArg) {
     throw new Error('Missing clientKey or redirectUri');
   }
 
-  // Store original app info for return after auth
-  sessionStorage.setItem('authState', state);
-  sessionStorage.setItem('originalApp', clientKey);
-  sessionStorage.setItem('returnUrl', redirectUri);
+  // Store state for callback validation
+  localStorage.setItem('authState', state);
+  localStorage.setItem('originalApp', clientKey);
+  localStorage.setItem('returnUrl', redirectUri);
+
+  // --- ENTERPRISE LOGIC ---
+  // If we are already in Account-UI, go straight to the backend
+  if (window.location.origin === accountUiUrl && clientKey === 'account-ui') {
+    // Direct SSO kick-off for Account-UI
+    const backendLoginUrl = `${authBaseUrl}/login/${clientKey}?redirect_uri=${encodeURIComponent(redirectUri)}&state=${encodeURIComponent(state)}`;
+    console.log('Redirecting directly to auth backend:', backendLoginUrl);
+    window.location.href = backendLoginUrl;
+    return;
+  }
 
-  // Redirect to centralized Account UI instead of direct auth service
+  // Otherwise, centralized login flow (for other apps)
   const accountLoginUrl = `${accountUiUrl}/login?` + new URLSearchParams({
     client: clientKey,
     redirect_uri: redirectUri,
     state: state
   });
-
-  console.log('Redirecting to Account UI:', accountLoginUrl);
+  console.log('Redirecting to centralized Account UI:', accountLoginUrl);
   window.location.href = accountLoginUrl;
 }
 
+
 export function logout() {
   const { clientKey, authBaseUrl, accountUiUrl } = getConfig();
   const token = getToken();
@@ -63,16 +73,16 @@ export function handleCallback() {
   const accessToken = params.get('access_token');
   const error = params.get('error');
   const state = params.get('state');
-  const storedState = sessionStorage.getItem('authState');
+  const storedState = localStorage.getItem('authState');
 
   // Validate state
   if (state && storedState && state !== storedState) {
     throw new Error('Invalid state. Possible CSRF attack.');
   }
 
-  sessionStorage.removeItem('authState');
-  sessionStorage.removeItem('originalApp');
-  sessionStorage.removeItem('returnUrl');
+  localStorage.removeItem('authState');
+  localStorage.removeItem('originalApp');
+  localStorage.removeItem('returnUrl');
 
   if (error) {
     throw new Error(`Authentication failed: ${error}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spidy092/auth-client",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Scalable frontend auth SDK for centralized login using Keycloak + Auth Service.",
   "main": "index.js",
   "module": "index.js",