From 2864a946f21b03d3c444a526c429fa784a80be56 Mon Sep 17 00:00:00 2001
From: chan <b24028@hanmaceng.co.kr>
Date: Wed, 11 Feb 2026 14:32:37 +0900
Subject: [PATCH] =?UTF-8?q?feat:=20=EC=96=B4=EB=93=9C=EB=AF=BC=20=EB=A1=9C?=
 =?UTF-8?q?=EA=B7=B8=EC=9D=B8=20=EB=B0=A9=EC=8B=9D=EC=9D=84=20SSO=20?=
 =?UTF-8?q?=ED=8C=9D=EC=97=85=20=EC=97=B0=EB=8F=99=20=EB=B0=A9=EC=8B=9D?=
 =?UTF-8?q?=EC=9C=BC=EB=A1=9C=20=EB=B3=80=EA=B2=BD=20#243?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adminfront/src/features/auth/LoginPage.tsx | 149 +++++++++++----------
 adminfront/src/lib/apiClient.ts            |   5 +-
 2 files changed, 81 insertions(+), 73 deletions(-)

diff --git a/adminfront/src/features/auth/LoginPage.tsx b/adminfront/src/features/auth/LoginPage.tsx
index 4367c9bf..233da28c 100644
--- a/adminfront/src/features/auth/LoginPage.tsx
+++ b/adminfront/src/features/auth/LoginPage.tsx
@@ -1,7 +1,5 @@
-import { useMutation } from "@tanstack/react-query";
-import type { AxiosError } from "axios";
-import { KeyRound, Lock, Mail, ShieldHalf } from "lucide-react";
-import { useState } from "react";
+import { ShieldHalf, LogIn, ExternalLink } from "lucide-react";
+import { useState, useEffect } from "react";
 import { useNavigate } from "react-router-dom";
 import { Button } from "../../components/ui/button";
 import {
@@ -11,32 +9,55 @@ import {
   CardHeader,
   CardTitle,
 } from "../../components/ui/card";
-import { Input } from "../../components/ui/input";
-import { Label } from "../../components/ui/label";
-import { login } from "../../lib/adminApi";
-import { t } from "../../lib/i18n";
 
 function LoginPage() {
   const navigate = useNavigate();
-  const [loginId, setLoginId] = useState("");
-  const [password, setPassword] = useState("");
+  const [isLoggingIn, setIsLoggingIn] = useState(false);
 
-  const loginMutation = useMutation({
-    mutationFn: () => login({ loginId, password }),
-    onSuccess: (data) => {
-      window.localStorage.setItem("admin_session", data.sessionToken);
-      navigate("/");
-    },
-  });
+  useEffect(() => {
+    // Listen for login success message from the popup
+    const handleMessage = (event: MessageEvent) => {
+      // Security check: In production, verify event.origin
+      if (event.data?.type === "LOGIN_SUCCESS" && event.data?.token) {
+        window.localStorage.setItem("admin_session", event.data.token);
+        setIsLoggingIn(false);
+        navigate("/");
+      }
+    };
 
-  const handleSubmit = (e: React.FormEvent) => {
-    e.preventDefault();
-    loginMutation.mutate();
+    window.addEventListener("message", handleMessage);
+    return () => window.removeEventListener("message", handleMessage);
+  }, [navigate]);
+
+  const handleSSOLogin = () => {
+    const userfrontUrl = import.meta.env.VITE_USERFRONT_URL || "https://sso.hmac.kr";
+    const loginUrl = `${userfrontUrl}/login?source=adminfront`;
+    
+    const width = 500;
+    const height = 700;
+    const left = window.screen.width / 2 - width / 2;
+    const top = window.screen.height / 2 - height / 2;
+
+    const popup = window.open(
+      loginUrl,
+      "BaronSSOLogin",
+      `width=${width},height=${height},top=${top},left=${left},status=no,menubar=no,toolbar=no`
+    );
+
+    if (popup) {
+      setIsLoggingIn(true);
+      // Optional: Polling to detect if popup was closed without login
+      const timer = setInterval(() => {
+        if (popup.closed) {
+          clearInterval(timer);
+          setIsLoggingIn(false);
+        }
+      }, 1000);
+    } else {
+      alert("팝업 차단이 설정되어 있습니다. 팝업 허용 후 다시 시도해 주세요.");
+    }
   };
 
-  const errorMsg = (loginMutation.error as AxiosError<{ error?: string }>)?.response
-    ?.data?.error;
-
   return (
     <div className="flex min-h-screen items-center justify-center bg-background px-4 py-12 sm:px-6 lg:px-8 bg-[radial-gradient(ellipse_at_top,_var(--tw-gradient-stops))] from-primary/10 via-background to-background">
       <div className="w-full max-w-md space-y-8">
@@ -55,62 +76,46 @@ function LoginPage() {
         <Card className="border-primary/20 bg-card/50 backdrop-blur-xl shadow-2xl">
           <CardHeader className="space-y-1">
             <CardTitle className="text-2xl flex items-center gap-2">
-                <KeyRound size={20} className="text-primary" />
-                Sign in
+                <LogIn size={20} className="text-primary" />
+                관리자 로그인
             </CardTitle>
             <CardDescription>
-              관리자 계정 정보를 입력하여 로그인하세요.
+              Baron 통합 인증(SSO)을 통해 관리자 페이지에 접속합니다.
             </CardDescription>
           </CardHeader>
-          <CardContent>
-            <form onSubmit={handleSubmit} className="space-y-4">
-              <div className="space-y-2">
-                <Label htmlFor="loginId">ID (Email)</Label>
-                <div className="relative">
-                  <Mail className="absolute left-3 top-3 h-4 w-4 text-muted-foreground" />
-                  <Input
-                    id="loginId"
-                    type="email"
-                    placeholder="admin@baron.co.kr"
-                    className="pl-10"
-                    value={loginId}
-                    onChange={(e) => setLoginId(e.target.value)}
-                    required
-                  />
-                </div>
-              </div>
-              <div className="space-y-2">
-                <Label htmlFor="password">Password</Label>
-                <div className="relative">
-                  <Lock className="absolute left-3 top-3 h-4 w-4 text-muted-foreground" />
-                  <Input
-                    id="password"
-                    type="password"
-                    className="pl-10"
-                    value={password}
-                    onChange={(e) => setPassword(e.target.value)}
-                    required
-                  />
-                </div>
-              </div>
-
-              {errorMsg && (
-                <div className="rounded-lg border border-destructive/40 bg-destructive/10 px-3 py-2 text-sm text-destructive animate-in fade-in zoom-in duration-200">
-                  {errorMsg}
-                </div>
+          <CardContent className="pt-4 pb-8">
+            <Button 
+                onClick={handleSSOLogin} 
+                className="w-full h-14 text-lg font-semibold flex gap-3 shadow-lg"
+                disabled={isLoggingIn}
+            >
+              {isLoggingIn ? (
+                <>
+                  <div className="h-5 w-5 border-2 border-white/30 border-t-white rounded-full animate-spin" />
+                  로그인 진행 중...
+                </>
+              ) : (
+                <>
+                  <ShieldHalf size={22} />
+                  SSO 계정으로 로그인
+                  <ExternalLink size={16} className="opacity-50" />
+                </>
               )}
-
-              <Button 
-                type="submit" 
-                className="w-full h-11 text-base font-semibold"
-                disabled={loginMutation.isPending}
-              >
-                {loginMutation.isPending ? "Signing in..." : "Login to Dashboard"}
-              </Button>
-            </form>
+            </Button>
+            
+            <p className="mt-6 text-xs text-center text-muted-foreground leading-relaxed">
+              관리자 전역 세션은 보안을 위해 15분간 유지됩니다.<br />
+              민감한 작업 시 재인증을 요구할 수 있습니다.
+            </p>
           </CardContent>
         </Card>
 
+        <div className="flex justify-center gap-4">
+            <div className="h-1 w-1 rounded-full bg-primary/30"></div>
+            <div className="h-1 w-1 rounded-full bg-primary/30"></div>
+            <div className="h-1 w-1 rounded-full bg-primary/30"></div>
+        </div>
+
         <p className="px-8 text-center text-sm text-muted-foreground">
           인증 정보가 없거나 로그인이 되지 않는 경우<br />
           시스템 관리자에게 문의하세요.
@@ -120,4 +125,4 @@ function LoginPage() {
   );
 }
 
-export default LoginPage;
+export default LoginPage;
\ No newline at end of file
diff --git a/adminfront/src/lib/apiClient.ts b/adminfront/src/lib/apiClient.ts
index c93d5766..a3c0f3eb 100644
--- a/adminfront/src/lib/apiClient.ts
+++ b/adminfront/src/lib/apiClient.ts
@@ -29,7 +29,10 @@ apiClient.interceptors.request.use((config) => {
 apiClient.interceptors.response.use(
   (response) => response,
   (error) => {
-    // TODO: 401/403 응답 시 로그인/재인증 플로우로 리다이렉션한다.
+    if (error.response?.status === 401) {
+      window.localStorage.removeItem("admin_session");
+      window.location.href = "/login";
+    }
     return Promise.reject(error);
   },
 );