From 808503348516d417b7b96606cb32aa080a131604 Mon Sep 17 00:00:00 2001
From: Gaurav Munjal <Gaurav0@aol.com>
Date: Tue, 23 Jul 2024 09:37:33 -0400
Subject: [PATCH] Use postmessage instead of storage event for embedded case

---
 addon/mixins/ui-service-mixin.js | 34 ++++++++++++++++++++++++++++++
 addon/providers/oauth2-bearer.js |  6 ++++++
 addon/redirect-handler.js        |  2 +-
 public/redirect.html             | 36 ++++++++++++++++++++++++++++++--
 4 files changed, 75 insertions(+), 3 deletions(-)

diff --git a/addon/mixins/ui-service-mixin.js b/addon/mixins/ui-service-mixin.js
index b58a7284..45342ac1 100644
--- a/addon/mixins/ui-service-mixin.js
+++ b/addon/mixins/ui-service-mixin.js
@@ -38,6 +38,7 @@ var ServicesMixin = Mixin.create({
     let service = this;
     let lastRemote = this.remote;
     let storageToriiEventHandler;
+    let messageToriiEventHandler;
 
     return new EmberPromise(function (resolve, reject) {
       if (lastRemote) {
@@ -55,7 +56,39 @@ var ServicesMixin = Mixin.create({
           });
         }
       };
+
+      // Using postMessage as an alternative to localStorage/storageEvent
+      // for case of web site embedded in iframe
+      messageToriiEventHandler = function (messageEvent) {
+        if (messageEvent.source === service.remote) {
+          if (messageEvent.data === 'getPendingRequestKey') {
+            // console.log('getPendingRequestKey');
+            service.remote.postMessage(
+              JSON.stringify({ pendingRequestKey: service.pendingRequestKey })
+            );
+          } else {
+            const msg = JSON.parse(messageEvent.data);
+            // console.log(msg);
+            const key = Object.keys(msg)[0];
+            var remoteIdFromEvent = PopupIdSerializer.deserialize(
+              decodeURIComponent(key)
+            );
+            if (remoteId === remoteIdFromEvent) {
+              // console.log(msg[key]);
+              var data = parseMessage(msg[key], keys);
+              localStorage.removeItem(key);
+              // console.log(data);
+              run(function () {
+                resolve(data);
+              });
+            }
+          }
+        }
+      };
+      window.addEventListener('message', messageToriiEventHandler);
+
       var pendingRequestKey = PopupIdSerializer.serialize(remoteId);
+      service.pendingRequestKey = pendingRequestKey;
       localStorage.setItem(CURRENT_REQUEST_KEY, pendingRequestKey);
       localStorage.removeItem(WARNING_KEY);
 
@@ -115,6 +148,7 @@ var ServicesMixin = Mixin.create({
     }).finally(function () {
       // didClose will reject this same promise, but it has already resolved.
       service.close();
+      window.removeEventListener('message', messageToriiEventHandler);
       window.removeEventListener('storage', storageToriiEventHandler);
     });
   },
diff --git a/addon/providers/oauth2-bearer.js b/addon/providers/oauth2-bearer.js
index f3a0fb25..77778084 100644
--- a/addon/providers/oauth2-bearer.js
+++ b/addon/providers/oauth2-bearer.js
@@ -39,6 +39,12 @@ var Oauth2Bearer = Provider.extend({
           );
         }
 
+        console.log({
+          authorizationToken: authData,
+          provider: name,
+          redirectUri: redirectUri,
+        });
+
         return {
           authorizationToken: authData,
           provider: name,
diff --git a/addon/redirect-handler.js b/addon/redirect-handler.js
index 2cfbcec2..1e72f26c 100644
--- a/addon/redirect-handler.js
+++ b/addon/redirect-handler.js
@@ -38,7 +38,7 @@ var RedirectHandler = EmberObject.extend({
         if (remoteServiceName === 'popup') {
           // NOTE : If a single provider has been configured to use the 'iframe'
           // service, this next line will still be called. It will just fail silently.
-          windowObject.close();
+          // windowObject.close();
         }
       } else {
         reject(new ToriiRedirectError('Not a torii popup'));
diff --git a/public/redirect.html b/public/redirect.html
index b58b7a26..4a4fb637 100644
--- a/public/redirect.html
+++ b/public/redirect.html
@@ -11,9 +11,41 @@
         window.localStorage.removeItem(CURRENT_REQUEST_KEY);
         var url = window.location.toString();
         window.localStorage.setItem(pendingRequestKey, url);
-      }
+        const obj = {};
+        obj[pendingRequestKey] = url;
+        // console.log(obj);
+        window.opener.postMessage(
+          JSON.stringify(obj),
+          'https://localhost:3000'
+        );
+
+        window.close();
+      } else {
+        window.opener.postMessage('getPendingRequestKey', 'https://localhost:3000');
+        window.addEventListener('message', function(messageEvent) {
+          // console.log(messageEvent);
+          if (messageEvent.source === window.opener) {
+            // console.log(messageEvent.data);
+            const msg = JSON.parse(messageEvent.data);
+            // console.log(msg);
+            if (msg.pendingRequestKey) {
+              pendingRequestKey = msg.pendingRequestKey;
+              // console.log(pendingRequestKey);
+              url = window.location.toString();
+              // console.log(url);
+              const obj = {};
+              obj[pendingRequestKey] = url;
+              // console.log(obj);
+              window.opener.postMessage(
+                JSON.stringify(obj),
+                'https://localhost:3000'
+              );
 
-      window.close();
+              window.close();
+            }
+          }
+        });
+      }
     </script>
   </head>
 </html>