Handle SSO redirect

Author: Yelo420

src/components/Login.tsx

@@ -12,7 +12,7 @@ import ThemeSwitch from "./ThemeSwitch";
 import { RegisterUserDtoFromJSON } from "../api";
 
 export function Login() {
-  const { loginBasic, loading, error } = useAuth();
+  const { loginBasic, loginWithTokens, loading, error } = useAuth();
   const navigate = useNavigate();
   const [server, setServer] = useState(window.location.origin);
   const [username, setUsername] = useState("");
@@ -42,6 +42,50 @@ export function Login() {
     return s;
   }, []);
 
+  // Parse SSO redirect style: {server}/access_token=...&refresh_token=...
+  useEffect(() => {
+    // Detect tokens embedded after origin (no question mark) e.g. https://srv/access_token=XXX&refresh_token=YYY
+    // Or possibly inside hash.
+    try {
+      const loc = window.location;
+      const path = loc.pathname.startsWith("/")
+        ? loc.pathname.slice(1)
+        : loc.pathname;
+      const hash = loc.hash.startsWith("#") ? loc.hash.slice(1) : loc.hash;
+      const candidate = path.includes("access_token=") ? path : hash;
+      if (!candidate) return;
+      if (!/access_token=/.test(candidate)) return;
+      // Interpret as key=value pairs separated by & possibly with leading segment (e.g., access_token=...&refresh_token=...)
+      const pairs = candidate.split("&").filter(Boolean);
+      const data: Record<string, string> = {};
+      for (const p of pairs) {
+        const eq = p.indexOf("=");
+        if (eq === -1) continue;
+        const k = decodeURIComponent(p.slice(0, eq));
+        const v = decodeURIComponent(p.slice(eq + 1));
+        data[k] = v;
+      }
+      if (!data.access_token) return;
+      // Determine server base: remove the trailing candidate part from URL if it's at pathname
+      const base = window.location.origin;
+      (async () => {
+        try {
+          await loginWithTokens(base, {
+            access_token: data.access_token,
+            refresh_token: data.refresh_token,
+          });
+          // Clean URL (remove tokens) then navigate
+          window.history.replaceState({}, document.title, base + "/login");
+          navigate("/library", { replace: true });
+        } catch {
+          // ignore - error shown via context
+        }
+      })();
+    } catch {
+      // ignore parsing errors
+    }
+  }, [loginWithTokens, navigate]);
+
   const onSubmit = async (e: FormEvent) => {
     e.preventDefault();
     try {

src/context/AuthContext.tsx

@@ -26,6 +26,8 @@ interface AuthContextValue {
   loginBasic: (
     args: LoginArgs,
   ) => Promise<{ auth: AuthTokens; user: GamevaultUser }>;
+  /** Directly initialize auth state from already obtained tokens (e.g. SSO redirect). */
+  loginWithTokens: (server: string, tokens: AuthTokens) => Promise<{ auth: AuthTokens; user: GamevaultUser }>;
   logout: () => void;
   authFetch: (input: string, init?: RequestInit) => Promise<Response>;
   refreshCurrentUser: () => Promise<GamevaultUser | null>;
@@ -232,6 +234,41 @@ export function AuthProvider({ children }: { children: ReactNode }) {
     [],
   );
 
+  const loginWithTokens = useCallback(
+    async (server: string, tokens: AuthTokens) => {
+      setError(null);
+      setLoading(true);
+      setUser(null);
+      setAuth(null);
+      authRef.current = null;
+      nextTokenRefreshRef.current = null;
+      serverRef.current = (server || "").replace(/\/+$/, "");
+      setServerUrl(serverRef.current);
+      localStorage.setItem(SERVER_KEY, serverRef.current);
+      try {
+        if (!tokens?.access_token) throw new Error("Missing access token");
+        authRef.current = tokens;
+        setAuth(tokens);
+        if (tokens.refresh_token)
+          localStorage.setItem(REFRESH_KEY, tokens.refresh_token);
+        nextTokenRefreshRef.current = computeNextTokenRefresh(
+          tokens.access_token,
+        );
+        const me = await fetchCurrentUser();
+        setUser(me);
+        return { auth: tokens, user: me };
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        setError(msg);
+        throw e;
+      } finally {
+        setLoading(false);
+        setBootstrapping(false);
+      }
+    },
+    [],
+  );
+
   useEffect(() => {
     (async () => {
       const storedRefresh = localStorage.getItem(REFRESH_KEY);
@@ -293,6 +330,7 @@ export function AuthProvider({ children }: { children: ReactNode }) {
     loading,
     bootstrapping,
     loginBasic,
+    loginWithTokens,
     logout,
     authFetch,
     refreshCurrentUser,