capacitor-sso-webview 0.0.6 → 0.0.8

package/android/src/main/java/com/telkomsel/ssowebview/SSOWebView.java

@@ -4,6 +4,9 @@ import android.app.Activity;
 import android.app.Dialog;
 import android.graphics.Color;
 import android.net.Uri;
+import android.os.Handler;
+import android.os.Looper;
+import android.util.Log;
 import android.view.Gravity;
 import android.view.ViewGroup;
 import android.webkit.CookieManager;
@@ -14,8 +17,23 @@ import android.webkit.WebViewClient;
 import android.widget.LinearLayout;
 import android.widget.TextView;
 
+import java.io.BufferedReader;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.InputStreamReader;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.nio.charset.StandardCharsets;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+
 public class SSOWebView {
 
+  private static final String TAG = "SSOWebView";
+
+  /* Single background thread — cukup untuk satu exchange per login attempt */
+  private static final ExecutorService EXECUTOR = Executors.newSingleThreadExecutor();
+
   public interface Listener {
     void onRedirectIntercepted(String url, String code, String state, String body);
 
@@ -103,78 +121,31 @@ public class SSOWebView {
 
         if (isRedirect && !alreadyRedirected) {
           alreadyRedirected = true;
-          /* Biarkan WebView navigate — server akan return JSON body */
-          return false;
+
+          final String finalUrl   = u.toString();
+          final String finalCode  = u.getQueryParameter("code")  != null
+                                    ? u.getQueryParameter("code")  : "";
+          final String finalState = u.getQueryParameter("state") != null
+                                    ? u.getQueryParameter("state") : "";
+
+          /*
+           * PENTING: BATALKAN navigasi (return true), jangan biarkan WebView
+           * merender URL ini. Endpoint redirect mengembalikan JSON, bukan
+           * HTML — jika WebView mencoba menampilkannya sebagai halaman, hasil
+           * yang didapat adalah halaman error native "Webpage not available",
+           * bukan body JSON, sehingga JSON.parse di sisi JS selalu gagal.
+           *
+           * Sebagai gantinya, ambil body via HTTP request native di background
+           * thread — pola yang sama seperti fetchJsonFromUrl() pada
+           * LoginIdamActivity, yang sudah terbukti bekerja untuk flow login
+           * berbasis WebView redirect lainnya di aplikasi ini.
+           */
+          dismiss();
+          fetchRedirectBody(finalUrl, finalCode, finalState, listener);
+          return true;
         }
         return false;
       }
-
-      @Override
-      public void onPageFinished(WebView view, String pageUrl) {
-        super.onPageFinished(view, pageUrl);
-
-        Uri u = Uri.parse(pageUrl);
-        String host = u.getHost();
-        String path = u.getPath();
-
-        boolean isRedirectPage = host != null && host.equalsIgnoreCase(redirectHost) &&
-          path != null && path.toLowerCase()
-          .contains(redirectPathContains.toLowerCase());
-
-        if (!isRedirectPage)
-          return;
-
-        final String finalUrl = pageUrl;
-        final String finalCode = u.getQueryParameter("code") != null ?
-          u.getQueryParameter("code") :
-          "";
-        final String finalState = u.getQueryParameter("state") != null ?
-          u.getQueryParameter("state") :
-          "";
-
-        /* Delay 150ms — beri waktu body JSON ter-render ke DOM */
-        view.postDelayed(new Runnable() {
-          @Override
-          public void run() {
-            if (webView == null) return;
-            webView.evaluateJavascript(
-              "(function(){" +
-              "  var t = document.body" +
-              "    ? (document.body.innerText || document.body.textContent || '')" +
-              "    : '';" +
-              "  return t.trim();" +
-              "})()",
-              value -> {
-                String body = value;
-                if (body != null) {
-                  if (body.startsWith("\"") && body.endsWith("\""))
-                    body = body.substring(1, body.length() - 1);
-                  body = body.replace("\\\"", "\"")
-                    .replace("\\n", "\n")
-                    .replace("\\r", "")
-                    .replace("\\/", "/");
-                }
-                final String finalBody = (body != null) ? body : "";
-                android.util.Log.d("SSOWebView",
-                  "body len=" + finalBody.length() +
-                  " preview=" + finalBody.substring(
-                    0, Math.min(120, finalBody.length())));
-
-                /* FIX: gunakan outer class reference */
-                activity.runOnUiThread(() -> SSOWebView.this.dismiss());
-
-                if (listener != null)
-                  listener.onRedirectIntercepted(
-                    finalUrl, finalCode, finalState, finalBody);
-              }
-            );
-          }
-        }, 150);
-      }
-
-      private void dismiss() {
-        SSOWebView.this.dismiss();
-      }
     });
 
     webView.setLayoutParams(new LinearLayout.LayoutParams(ViewGroup.LayoutParams.MATCH_PARENT, 0, 1f));
@@ -193,6 +164,64 @@ public class SSOWebView {
     webView.loadUrl(url);
   }
 
+  private void fetchRedirectBody(
+      final String url,
+      final String code,
+      final String state,
+      final Listener listener) {
+
+    EXECUTOR.execute(() -> {
+      String body;
+      HttpURLConnection conn = null;
+      try {
+        conn = (HttpURLConnection) new URL(url).openConnection();
+        conn.setRequestMethod("GET");
+        conn.setConnectTimeout(20000);
+        conn.setReadTimeout(20000);
+        conn.setRequestProperty("Accept", "application/json");
+
+        int status = conn.getResponseCode();
+        InputStream is = (status >= 200 && status < 400)
+            ? conn.getInputStream() : conn.getErrorStream();
+        body = readStream(is);
+
+        Log.d(TAG, "fetchRedirectBody status=" + status + " len=" + body.length());
+      } catch (Exception e) {
+        Log.e(TAG, "fetchRedirectBody failed", e);
+        /*
+         * Bungkus error sebagai JSON agar konsumen JS (yang selalu mem-parse
+         * body sebagai JSON dan memeriksa `status`) mendapat pesan yang jelas,
+         * alih-alih body kosong atau string mentah yang gagal di-parse.
+         */
+        body = "{\"status\":0,\"status_message\":\"" + escapeJson(e.getMessage()) + "\"}";
+      } finally {
+        if (conn != null) conn.disconnect();
+      }
+
+      final String finalBody = body;
+      new Handler(Looper.getMainLooper()).post(() -> {
+        if (listener != null) {
+          listener.onRedirectIntercepted(url, code, state, finalBody);
+        }
+      });
+    });
+  }
+
+  private static String readStream(InputStream is) throws IOException {
+    if (is == null) return "";
+    StringBuilder sb = new StringBuilder();
+    try (BufferedReader br = new BufferedReader(new InputStreamReader(is, StandardCharsets.UTF_8))) {
+      String line;
+      while ((line = br.readLine()) != null) sb.append(line);
+    }
+    return sb.toString();
+  }
+
+  private static String escapeJson(String s) {
+    if (s == null) return "Unknown network error";
+    return s.replace("\\", "\\\\").replace("\"", "\\\"");
+  }
+
   public void dismiss() {
     try {
       if (webView != null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "capacitor-sso-webview",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "description": "SSO WebView with URL intercept",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",