mitra-interactions-sdk 1.0.60-beta.0 → 1.0.60-beta.1

package/dist/index.js

@@ -317,12 +317,25 @@ var OAUTH_RESULT_TYPE = "mitra-oauth-result";
 var POPUP_W = 480;
 var POPUP_H = 600;
 var POPUP_TIMEOUT_MS = 5 * 60 * 1e3;
-var PASSTHROUGH_PATH = "/sdk-auth/oauth";
-function buildPassthroughBaseUrl(baseURL) {
-  return baseURL.replace(/\/+$/, "") + PASSTHROUGH_PATH;
+async function fetchSsoAuthPageUrl(baseURL) {
+  const fetchFn = getFetch();
+  const response = await fetchFn(buildEndpoint(baseURL, "/sso/config"), {
+    method: "GET",
+    headers: { accept: "application/json" }
+  });
+  if (!response.ok) {
+    throw new Error(`SSO discovery falhou (HTTP ${response.status}).`);
+  }
+  const data = await response.json().catch(() => null);
+  const url = data && typeof data.authPageUrl === "string" ? data.authPageUrl : "";
+  if (!url) {
+    throw new Error("SSO discovery n\xE3o retornou authPageUrl.");
+  }
+  return url;
 }
-function buildStartUrl(baseURL, provider, state, appId) {
-  return buildPassthroughBaseUrl(baseURL) + "?" + new URLSearchParams({ provider, state, appId }).toString();
+function buildStartUrl(authPageUrl, provider, state, appId, apiUrl) {
+  const sep = authPageUrl.includes("?") ? "&" : "?";
+  return authPageUrl + sep + new URLSearchParams({ provider, state, appId, apiUrl }).toString();
 }
 function getOriginFromUrl2(url) {
   try {
@@ -408,10 +421,11 @@ async function loginWithProvider(provider, options) {
       const { authUrl, projectId } = resolveLoginOptions2(options);
       const state = generateState();
       const appId = String(projectId);
-      const expectedOrigin = getOriginFromUrl2(authUrl);
-      const startUrl = buildStartUrl(authUrl, provider, state, appId);
-      const redirectUri = buildPassthroughBaseUrl(authUrl);
-      const { code } = await openOAuthPopup(startUrl, expectedOrigin, state);
+      const authPageUrl = await fetchSsoAuthPageUrl(authUrl);
+      const pageOrigin = getOriginFromUrl2(authPageUrl);
+      const redirectUri = authPageUrl;
+      const startUrl = buildStartUrl(authPageUrl, provider, state, appId, authUrl);
+      const { code } = await openOAuthPopup(startUrl, pageOrigin, state);
       const tokens = await postNewAuth(buildEndpoint(authUrl, `/${provider}`), {
         code,
         redirectUri,