callback 검증 보강. seed-tenant 추가보강

devfront/src/lib/auth.ts

@@ -1,14 +1,25 @@
 import { UserManager, WebStorageStateStore } from "oidc-client-ts";
 import type { AuthProviderProps } from "react-oidc-context";
+import {
+  buildDevFrontAuthRedirectUris,
+  resolveDevFrontPublicOrigin,
+} from "./authConfig";
+
+const devFrontPublicOrigin = resolveDevFrontPublicOrigin(
+  import.meta.env.VITE_DEVFRONT_PUBLIC_URL,
+  window.location.origin,
+);
+const devFrontRedirectUris =
+  buildDevFrontAuthRedirectUris(devFrontPublicOrigin);
 
 export const oidcConfig: AuthProviderProps = {
   authority: import.meta.env.VITE_OIDC_AUTHORITY || "https://sso.hmac.kr/oidc", // Gateway Proxy URL
   client_id: import.meta.env.VITE_OIDC_CLIENT_ID || "devfront",
-  redirect_uri: `${window.location.origin}/auth/callback`,
+  redirect_uri: devFrontRedirectUris.redirectUri,
   response_type: "code",
   scope: "openid offline_access profile email", // offline_access for refresh token
-  post_logout_redirect_uri: window.location.origin,
-  popup_redirect_uri: `${window.location.origin}/auth/callback`,
+  post_logout_redirect_uri: devFrontRedirectUris.postLogoutRedirectUri,
+  popup_redirect_uri: devFrontRedirectUris.popupRedirectUri,
   userStore: new WebStorageStateStore({ store: window.localStorage }),
   automaticSilentRenew: false,
 };