@truworth/twc-auth 3.0.4 → 3.0.5

package/build/src/screens/SSOLogin/SSOCallback/components/SSOCallbackComponent/index.js

@@ -27,12 +27,13 @@ const SSOCallbackComponents = ({ authMethodOverride } = {}) => {
     const [code, setCode] = useState('');
     const [authMethod, setAuthMethod] = useState(authMethodOverride ?? null);
     const [isReady, setIsReady] = useState(false);
-    // Resolve code/token from query (preferred) or localStorage; clientId/authMethod from localStorage only
+    // Resolve code from query params; clientId from localStorage (only needed for OIDC)
     useEffect(() => {
         const query = navigator.query;
         const codeFromQuery = query.code;
         if (typeof window !== 'undefined') {
             try {
+                // clientId only needed for OIDC, not SAML
                 const storedClientId = localStorage.getItem('clientId') || '';
                 const storedAuthMethod = localStorage.getItem('authMethod') || 'oidc';
                 setClientId(storedClientId);

package/build/src/screens/SSOLogin/SSOCallback/hooks/internal/useSSOCallback.js

@@ -19,8 +19,10 @@ const useSSOCallback = ({ clientId, code, authMethod, isReady = true }) => {
     const { onLogin, onRegistrationMethodChange, onTokenChange } = useAuthPackageContext();
     const processSSOCallback = useCallback((codeToProcess) => {
         setError(null);
+        // SAML: Use simplified endpoint that doesn't require clientId
+        // OIDC: Use legacy endpoint with clientId
         const endpoint = authMethod === 'saml'
-            ? `/auth/login-sso/${clientId}/saml-sso-complete`
+            ? `/auth/saml/complete`
             : `/auth/login-sso/${clientId}/callback`;
         axiosClient({
             url: endpoint,
@@ -42,11 +44,15 @@ const useSSOCallback = ({ clientId, code, authMethod, isReady = true }) => {
         });
     }, [clientId, authMethod, onLogin, onRegistrationMethodChange, onTokenChange]);
     useEffect(() => {
-        if (isReady && code && clientId && !hasProcessed) {
+        if (!isReady || !code || hasProcessed)
+            return;
+        // SAML only needs code; OIDC needs both code and clientId
+        const canProcess = authMethod === 'saml' || clientId;
+        if (canProcess) {
             setHasProcessed(true);
             processSSOCallback(code);
         }
-    }, [isReady, code, clientId, hasProcessed, processSSOCallback]);
+    }, [isReady, code, clientId, authMethod, hasProcessed, processSSOCallback]);
     return { result, error };
 };
 export { useSSOCallback };

package/package.json

@@ -4,7 +4,7 @@
     "access": "public"
   },
   "description": "Truworth Auth Package for React Native and Web",
-  "version": "3.0.4",
+  "version": "3.0.5",
   "main": "build/src/index.js",
   "types": "build/types/index.d.ts",
   "files": [