From 6aae6d7dffc5ae638dd72479723026ba1ee7ce9a Mon Sep 17 00:00:00 2001
From: SDI <b24014@hanmaceng.co.kr>
Date: Wed, 1 Jul 2026 14:14:32 +0900
Subject: [PATCH] =?UTF-8?q?BARON-SSO=20=EB=A1=9C=EA=B7=B8=EC=9D=B8=20UI=20?=
 =?UTF-8?q?=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env       |  8 ++++----
 index.html |  6 +++---
 server.js  | 21 ++++++++++++++++++++-
 3 files changed, 27 insertions(+), 8 deletions(-)

diff --git a/.env b/.env
index f74825f..289c17b 100644
--- a/.env
+++ b/.env
@@ -3,8 +3,8 @@ DB_PORT=3306
 DB_USER=itam
 DB_PASS=itam1234
 DB_NAME=itam
-CLIENT_ID=c89acfda-789b-45fb-bab6-7ebfa4c6a9b4
-ISSUER=https://sso.hmac.kr/oidc
-REDIRECT_URI=http://172.16.9.44:8080/callback
-JWKS_URI=http://172.16.9.44:8080/.well-known/jwks.json
+CLIENT_ID=ffb5f168-5dea-4d90-8faa-1fa7acc5089b
+ISSUER=https://app.brsw.kr/oidc
+REDIRECT_URI=https://dachs.hmac.kr/callback
+JWKS_URI=https://dachs.hmac.kr/.well-known/jwks.json
 PORT=3000
diff --git a/index.html b/index.html
index 53bd4ab..a1f4b33 100644
--- a/index.html
+++ b/index.html
@@ -17,7 +17,7 @@
   <div class="login-layout" id="login-container" style="display: none;">
     <section class="login-card">
       <div class="login-header">
-        <img src="/image 92.png" alt="Logo" class="login-logo" />
+        <img src="/img/image_92.png" alt="Logo" class="login-logo" />
         <h2>한맥자산관리시스템</h2>
         <p>전화번호로 본인 확인 후 로그인하세요.</p>
       </div>
@@ -27,7 +27,7 @@
           <span>전화번호</span>
           <input id="phone-login-id" name="phoneLoginId" type="tel" autocomplete="tel" placeholder="휴대전화 번호 입력" required />
         </label>
-        <p id="phone-login-hint" class="login-hint">숫자만 입력하면 됩니다. 인증 링크는 등록된 카카오톡 또는 SMS로 전송됩니다.</p>
+        <p id="phone-login-hint" class="login-hint">숫자만 입력하면 됩니다. 인증 링크는 등록된 SMS로 전송됩니다.</p>
         <p id="phone-login-status" class="login-status" hidden></p>
         <p id="phone-login-error" class="login-error" hidden></p>
         <button id="phone-login-submit" type="submit" class="btn btn-primary login-submit">인증 링크 보내기</button>
@@ -44,7 +44,7 @@
     <header class="main-header">
       <div class="header-container" id="nav-container">
         <div class="brand">
-          <img src="/image 92.png" alt="Logo" class="main-logo" />
+          <img src="/img/image_92.png" alt="Logo" class="main-logo" />
           <h1>한맥자산관리시스템</h1>
         </div>
 
diff --git a/server.js b/server.js
index 29a4bda..1f539c8 100644
--- a/server.js
+++ b/server.js
@@ -122,6 +122,16 @@ const handleError = (res, err, label) => {
   res.status(500).json({ error: err.message });
 };
 
+const saveSession = (req) => new Promise((resolve, reject) => {
+  req.session.save((error) => {
+    if (error) {
+      reject(error);
+      return;
+    }
+    resolve();
+  });
+});
+
 // --- Global Constants ---
 const CATEGORY_TABLE_MAP = {
   pc: 'asset_core',
@@ -613,6 +623,8 @@ app.post('/api/auth/headless/login', async (req, res) => {
       }
     };
 
+    await saveSession(req);
+
     res.json({ success: true, user: req.session.user });
   } catch (error) {
     console.error('Headless SSO login failed:', error);
@@ -629,7 +641,11 @@ app.post('/api/auth/headless/phone/init', async (req, res) => {
 
   try {
     const pendingLogin = await initHeadlessPhoneLogin({ loginId });
-    req.session.pendingPhoneLogin = pendingLogin;
+    req.session.pendingPhoneLogin = {
+      ...pendingLogin,
+      startedAt: Date.now()
+    };
+    await saveSession(req);
     res.json({
       success: true,
       pendingRef: pendingLogin.pendingRef,
@@ -670,6 +686,7 @@ app.post('/api/auth/headless/phone/poll', async (req, res) => {
         intervalMs: result.intervalMs,
         startedAt: pendingLogin.startedAt || Date.now()
       };
+      await saveSession(req);
       return res.json({
         success: true,
         status: 'pending',
@@ -701,6 +718,8 @@ app.post('/api/auth/headless/phone/poll', async (req, res) => {
       }
     };
 
+    await saveSession(req);
+
     return res.json({ success: true, status: 'authenticated', user: req.session.user });
   } catch (error) {
     console.error('Headless phone login poll failed:', error);