mirror of
https://github.com/bitwarden/browser
synced 2025-12-19 01:33:33 +00:00
* Moved saving of SSO email outside of browser/desktop code * Clarified comments. * Tests * Refactored login component services to manage state * Fixed input on login component * Fixed tests * Linting * Moved web setting in state into web override * updated tests * Fixed typing. * Fixed type safety issues. * Added comments and renamed for clarity. * Removed method parameters that weren't used * Added clarifying comments * Added more comments. * Removed test that is not necessary on base * Test cleanup * More comments. * Linting * Fixed test. * Fixed base URL * Fixed typechecking. * Type checking * Moved setting of email state to default service * Added comments. * Consolidated SSO URL formatting * Updated comment * Fixed reference. * Fixed missing parameter. * Initialized service. * Added comments * Added initialization of new service * Made email optional due to CLI. * Fixed comment on handleSsoClick. * Added SSO email persistence to v1 component. --------- Co-authored-by: Bernd Schoolmann <mail@quexten.com>
59 lines
2.0 KiB
TypeScript
59 lines
2.0 KiB
TypeScript
// FIXME: Update this file to be type safe and remove this and next line
|
|
// @ts-strict-ignore
|
|
import { getQsParam } from "./common";
|
|
|
|
// FIXME: Remove when updating file. Eslint update
|
|
// eslint-disable-next-line @typescript-eslint/no-require-imports
|
|
require("./sso.scss");
|
|
|
|
window.addEventListener("load", () => {
|
|
const code = getQsParam("code");
|
|
const state = getQsParam("state");
|
|
const lastpass = getQsParam("lp");
|
|
|
|
if (lastpass === "1") {
|
|
initiateBrowserSso(code, state, true);
|
|
} else if (state != null && state.includes(":clientId=browser")) {
|
|
initiateBrowserSso(code, state, false);
|
|
} else {
|
|
initiateWebAppSso(code, state);
|
|
}
|
|
});
|
|
|
|
function initiateWebAppSso(code: string, state: string) {
|
|
// If we've initiated SSO from somewhere other than the SSO component on the web app, the SSO component will add
|
|
// a _returnUri to the state variable. Here we're extracting that URI and sending the user there instead of to the SSO component.
|
|
const returnUri = extractFromRegex(state, "(?<=_returnUri=')(.*)(?=')");
|
|
if (returnUri) {
|
|
window.location.href = window.location.origin + `/#${returnUri}`;
|
|
} else {
|
|
window.location.href = window.location.origin + "/#/sso?code=" + code + "&state=" + state;
|
|
}
|
|
}
|
|
|
|
function initiateBrowserSso(code: string, state: string, lastpass: boolean) {
|
|
window.postMessage({ command: "authResult", code: code, state: state, lastpass: lastpass }, "*");
|
|
const handOffMessage = ("; " + document.cookie)
|
|
.split("; ssoHandOffMessage=")
|
|
.pop()
|
|
.split(";")
|
|
.shift();
|
|
document.cookie = "ssoHandOffMessage=;SameSite=strict;max-age=0";
|
|
const content = document.getElementById("content");
|
|
content.innerHTML = "";
|
|
const p = document.createElement("p");
|
|
p.innerText = handOffMessage;
|
|
content.appendChild(p);
|
|
}
|
|
|
|
function extractFromRegex(s: string, regexString: string) {
|
|
const regex = new RegExp(regexString);
|
|
const results = regex.exec(s);
|
|
|
|
if (!results) {
|
|
return null;
|
|
}
|
|
|
|
return results[0];
|
|
}
|