sale order

public/sso-login.html

@@ -0,0 +1,54 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8"/>
+<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0"/>
+<title>Signing in… — SAP B1 Portal</title>
+<style>
+:root{--ink:#080e18;--surface:#0f1d30;--border:#1c2e48;--text:#c8d6e8;--text2:#7a9ab8;--amber:#f5a623;--red:#e53e3e;--font:'Segoe UI',sans-serif}
+*{box-sizing:border-box;margin:0;padding:0}
+body{font-family:var(--font);background:var(--ink);color:var(--text);min-height:100vh;display:flex;align-items:center;justify-content:center}
+.card{background:var(--surface);border:1px solid var(--border);border-radius:14px;padding:36px 32px;max-width:400px;width:92%;text-align:center}
+.sp{width:36px;height:36px;border:3px solid rgba(245,166,35,.25);border-top-color:var(--amber);border-radius:50%;animation:spin .7s linear infinite;margin:0 auto 18px}
+@keyframes spin{to{transform:rotate(360deg)}}
+h1{font-size:16px;margin-bottom:8px}
+p{font-size:13px;color:var(--text2);line-height:1.5}
+.err{color:#fca5a5;background:rgba(229,62,62,.12);border:1px solid rgba(229,62,62,.3);border-radius:8px;padding:10px 12px;margin-top:14px;font-size:12.5px;text-align:left}
+.btn{margin-top:18px;padding:9px 18px;border-radius:8px;border:none;background:var(--amber);color:#1a1200;font-weight:700;font-size:13px;cursor:pointer}
+</style>
+</head>
+<body>
+<div class="card" id="card">
+  <div class="sp"></div>
+  <h1>Signing you in…</h1>
+  <p>Verifying your central auth login, please wait.</p>
+</div>
+<script>
+'use strict';
+async function run(){
+  const card=document.getElementById('card');
+  const params=new URLSearchParams(location.search);
+  const token=params.get('access_token')||params.get('token');
+  if(!token){
+    card.innerHTML='<h1>Missing login token</h1><p>No token was provided in the URL. Please go back to central auth and try again.</p><button class="btn" onclick="location.href=\'/\'">Go to Login</button>';
+    return;
+  }
+  try{
+    const r=await fetch('/api/auth/sso-login',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({token})});
+    const d=await r.json();
+    if(!r.ok||!d.success)throw new Error(d.message||'SSO login failed');
+    try{
+      sessionStorage.setItem('portal_token',d.token);
+      sessionStorage.setItem('portal_user',JSON.stringify(d.user));
+      document.cookie='portal_token='+encodeURIComponent(d.token)+';path=/;SameSite=Lax';
+      document.cookie='portal_user='+encodeURIComponent(JSON.stringify(d.user))+';path=/;SameSite=Lax';
+    }catch(_e){}
+    location.href='/';
+  }catch(e){
+    card.innerHTML='<h1 style="color:#fca5a5">Sign-in failed</h1><div class="err">'+String(e.message||e).replace(/</g,'&lt;')+'</div><button class="btn" onclick="location.href=\'/\'">Back to Login</button>';
+  }
+}
+run();
+</script>
+</body>
+</html>