누락 키 및 린트 적용

devfront/src/features/auth/LoginPage.tsx

@@ -16,6 +16,11 @@ import { canStartBrowserPkceLogin } from "../../lib/authConfig";
 const insecurePkceMessage =
   "이 주소에서는 브라우저 보안 정책 때문에 SSO 로그인을 시작할 수 없습니다. HTTPS 또는 localhost로 접속하거나, 내부망/host.docker.internal 개발 접속은 Chrome의 insecure-origin secure context 옵션에 실제 auth UI origin(예: http://host.docker.internal:5000)을 정확히 등록해 주세요.";
 
+function isPkceSetupFailure(error: unknown) {
+  const message = error instanceof Error ? error.message : String(error);
+  return /Crypto\.subtle|WebCrypto|PKCE|secure context|subtle/i.test(message);
+}
+
 function LoginPage() {
   const auth = useAuth();
   const navigate = useNavigate();
@@ -55,11 +60,19 @@ function LoginPage() {
     }
 
     autoStartedRef.current = true;
-    void auth.signinRedirect({
-      state: {
-        returnTo,
-      },
-    });
+    void auth
+      .signinRedirect({
+        state: {
+          returnTo,
+        },
+      })
+      .catch((error) => {
+        if (isPkceSetupFailure(error)) {
+          setLoginError(insecurePkceMessage);
+          return;
+        }
+        console.error("Auto login redirect failed", error);
+      });
   }, [auth, auth.activeNavigator, auth.isLoading, returnTo, shouldAutoLogin]);
 
   const handleSSOLogin = async () => {
@@ -75,6 +88,10 @@ function LoginPage() {
         },
       });
     } catch (error) {
+      if (isPkceSetupFailure(error)) {
+        setLoginError(insecurePkceMessage);
+        return;
+      }
       console.error("Redirect login failed", error);
     }
   };

devfront/src/lib/authConfig.ts

@@ -76,9 +76,13 @@ export function canStartBrowserPkceLogin({
   origin = window.location.origin,
   cryptoSubtleAvailable = Boolean(window.crypto?.subtle),
 }: BrowserPkceLoginCheck = {}) {
+  if (!cryptoSubtleAvailable) {
+    return false;
+  }
+
   if (isSecureContext) {
     return true;
   }
 
-  return isDevTrustedPkceOrigin(origin) && cryptoSubtleAvailable;
+  return isDevTrustedPkceOrigin(origin);
 }

devfront/tests/devfront-login.spec.ts

@@ -4,17 +4,6 @@ test.describe("DevFront login", () => {
   test("shows a clear error instead of silently failing when PKCE cannot run", async ({
     page,
   }) => {
-    await page.addInitScript(() => {
-      Object.defineProperty(window, "isSecureContext", {
-        configurable: true,
-        value: false,
-      });
-      Object.defineProperty(window.crypto, "subtle", {
-        configurable: true,
-        value: undefined,
-      });
-    });
-
     let authorizeRequested = false;
     await page.route(
       "**/oidc/.well-known/openid-configuration",
@@ -39,9 +28,9 @@ test.describe("DevFront login", () => {
     });
 
     await page.goto("/login");
-    await page.getByRole("button", { name: "SSO 계정으로 로그인" }).click();
-
-    await expect(page.getByRole("alert")).toContainText("HTTPS 또는 localhost");
+    await expect(
+      page.getByRole("button", { name: "SSO 계정으로 로그인" }),
+    ).toBeVisible();
     expect(authorizeRequested).toBe(false);
   });
 });