Merge branch 'dev' into feature/i18n

userfront/lib/core/services/audit_service.dart

@@ -11,7 +11,8 @@ class AuditService {
     return dotenv.env[key] ?? fallback;
   }
 
-  static String get _baseUrl => _envOrDefault('BACKEND_URL', 'https://sso.hmac.kr');
+  static String get _baseUrl =>
+      _envOrDefault('BACKEND_URL', 'https://sso.hmac.kr');
 
   static Future<void> logEvent({
     required String userId,
@@ -20,7 +21,7 @@ class AuditService {
     String? details,
   }) async {
     final url = Uri.parse('$_baseUrl/api/v1/audit');
-    
+
     try {
       final response = await http.post(
         url,

userfront/lib/core/services/http_client.dart

@@ -1,6 +1,5 @@
 import 'package:http/http.dart' as http;
-import 'http_client_stub.dart'
-    if (dart.library.html) 'http_client_web.dart';
+import 'http_client_stub.dart' if (dart.library.html) 'http_client_web.dart';
 
 http.Client createHttpClient({bool withCredentials = false}) {
   return httpClientFactory.create(withCredentials: withCredentials);

userfront/lib/core/services/logger_service.dart

@@ -25,8 +25,10 @@ class LoggerService {
     );
 
     // 2. Configure Standard Logger (logging package)
-    std_log.Logger.root.level = kReleaseMode ? std_log.Level.WARNING : std_log.Level.ALL;
-    
+    std_log.Logger.root.level = kReleaseMode
+        ? std_log.Level.WARNING
+        : std_log.Level.ALL;
+
     std_log.Logger.root.onRecord.listen((record) {
       if (kReleaseMode) {
         // [Production] Log as JSON
@@ -41,13 +43,17 @@ class LoggerService {
   /// Initialize the logger. Call this in main.dart
   static void init() {
     // Accessing the instance triggers the constructor
-    LoggerService(); 
+    LoggerService();
     std_log.Logger('BaronSSO').info('Logger initialized');
   }
 
   void _logPretty(std_log.LogRecord record) {
     if (record.level >= std_log.Level.SEVERE) {
-      _prettyLogger.e(record.message, error: record.error, stackTrace: record.stackTrace);
+      _prettyLogger.e(
+        record.message,
+        error: record.error,
+        stackTrace: record.stackTrace,
+      );
     } else if (record.level >= std_log.Level.WARNING) {
       _prettyLogger.w(record.message);
     } else if (record.level >= std_log.Level.INFO) {
@@ -66,7 +72,7 @@ class LoggerService {
       if (record.error != null) 'error': record.error.toString(),
       if (record.stackTrace != null) 'stack': record.stackTrace.toString(),
     };
-    
+
     // 1. Print to Browser Console (F12)
     debugPrint(jsonEncode(logData));
 

userfront/lib/core/services/web_auth_integration_web.dart

@@ -14,15 +14,63 @@ void implSendLoginSuccess(String token) {
     } catch (e) {
       debugPrint('Failed to postMessage: $e');
     }
-    
+  }
+
+  // Final fallback: regex or manual search in fullUrl
+  if (redirectUri == null) {
+    for (final key in ['redirect_uri=', 'redirect_url=']) {
+      if (fullUrl.contains(key)) {
+        final start = fullUrl.indexOf(key) + key.length;
+        var end = fullUrl.indexOf('&', start);
+        if (end == -1) end = fullUrl.length;
+        final raw = fullUrl.substring(start, end);
+        try {
+          redirectUri = Uri.decodeComponent(raw);
+          break;
+        } catch (_) {}
+      }
+    }
+  }
+
+  if (redirectUri != null && redirectUri.isNotEmpty) {
+    // Redirection flow
+    final target = Uri.parse(redirectUri);
+    final query = Map<String, String>.from(target.queryParameters);
+    query['token'] = effectiveToken;
+    final finalUri = target.replace(queryParameters: query);
+
+    debugPrint('Redirecting to: ${finalUri.toString()}');
+    html.window.location.href = finalUri.toString();
+    return;
+  }
+
+  final message = {'type': 'LOGIN_SUCCESS', 'token': effectiveToken};
+  final opener = html.window.opener;
+
+  if (opener != null) {
+    try {
+      opener.postMessage(message, '*');
+      debugPrint('Sent login success message to opener');
+    } catch (e) {
+      debugPrint('Failed to postMessage: $e');
+    }
+
     // Close the popup after a short delay to ensure message sending
     Timer(const Duration(milliseconds: 500), () {
-      html.window.close();
+      try {
+        html.window.close();
+      } catch (e) {
+        debugPrint('Failed to close window: $e');
+      }
     });
   } else {
      // Should not happen given isPopup check, but as fallback:
     debugPrint('No opener found during popup flow.');
   }
+
+  // No opener and no redirect: fall back to local navigation
+  debugPrint('No opener found. Redirecting to /.');
+  html.window.location.href = '/';
 }
 
 bool implIsPopup() {