(function setupDesktopBridge() { const DESKTOP_SOURCE = 'donethat-desktop'; let lastToken = null; let signing = false; // Best-effort environment hint for pages that need to know if we're in desktop try { const ua = typeof navigator !== 'undefined' ? navigator.userAgent : ''; const hasElectronUA = !!ua && ua.includes('Electron'); const hasElectronProcess = typeof window !== 'undefined' && typeof (window).process?.versions?.electron === 'string'; (window).__DT_DESKTOP_ENV = Boolean(hasElectronUA || hasElectronProcess); } catch {} function showSpinner() { try { if (document.getElementById('desktop-auth-spinner')) return; const overlay = document.createElement('div'); overlay.id = 'desktop-auth-spinner'; overlay.setAttribute('aria-live', 'polite'); overlay.style.cssText = 'position:fixed;inset:0;background:rgba(255,255,255,0.8);z-index:2147483647;display:flex;align-items:center;justify-content:center;'; overlay.innerHTML = '

Loading…

'; document.body.appendChild(overlay); } catch {} } function hideSpinner() { try { const el = document.getElementById('desktop-auth-spinner'); if (el && el.parentNode) el.parentNode.removeChild(el); } catch {} } async function exchangeTokenForSession(idToken) { try { const res = await fetch('/api/desktop-login', { method: 'POST', headers: { 'Content-Type': 'application/json' }, credentials: 'include', body: JSON.stringify({ idToken }) }); const json = await res.json().catch(() => ({})); const customToken = json && json.customToken; if (!res.ok) { return { ok: false, customToken: null }; } if (customToken && window) { let apply = window.__applyDesktopCustomToken || window.__signInWithCustomToken; if (!apply) { for (var i = 0; i < 15; i++) { await new Promise(function(r) { setTimeout(r, 200); }); apply = window.__applyDesktopCustomToken || window.__signInWithCustomToken; if (apply) break; } } if (apply) { await apply(customToken, { syncServerSession: false }); return { ok: true, customToken }; } } return { ok: false, customToken: null }; } catch (e) { console.error('[WebApp] desktop bridge: exchangeTokenForSession failed', e); return { ok: false, customToken: null }; } } async function clearStalePortalAuth() { try { let clear = window.__firebaseSignOut; if (!clear) { for (var i = 0; i < 15; i++) { await new Promise(function(r) { setTimeout(r, 200); }); clear = window.__firebaseSignOut; if (clear) break; } } if (clear) await clear(); } catch (e) { console.error('[WebApp] desktop bridge: failed to clear stale portal auth', e); } } async function performLogout() { try { await fetch('/api/logout', { method: 'POST', credentials: 'include' }); } catch {} try { localStorage.clear(); sessionStorage.clear(); } catch {} try { window.location.assign('/login'); } catch {} } function isTrustedBridgeEvent(event) { // Electron preload posts from this same webview window. Opener // and iframe senders fail source or origin. return event.source === window && event.origin === window.location.origin; } window.addEventListener('message', async (event) => { const data = event?.data; if (!data || data.source !== DESKTOP_SOURCE) return; if (!isTrustedBridgeEvent(event)) { try { console.warn('[WebApp] desktop bridge: ignored untrusted message', { origin: event.origin, type: data.type, }); } catch {} return; } try { window.__DT_DESKTOP_ENV = true; } catch {} if (data.type === 'auth:setToken' && data?.payload?.token) { const token = data.payload.token; if (signing || token === lastToken) return; signing = true; showSpinner(); let authenticated = false; try { const result = await exchangeTokenForSession(token); if (!result || !result.ok) { console.error('[WebApp] desktop bridge: ID token exchange failed'); await clearStalePortalAuth(); return; } authenticated = true; try { if (location && (location.pathname === '/login' || location.pathname === '/')) { window.location.assign('/feed'); } } catch {} } finally { if (authenticated) lastToken = token; signing = false; hideSpinner(); } return; } if (data.type === 'auth:setCustomToken' && data?.payload?.customToken) { const customToken = data.payload.customToken; if (signing || customToken === lastToken) return; signing = true; showSpinner(); try { const apply = window.__applyDesktopCustomToken || window.__signInWithCustomToken; if (apply) { await apply(customToken, { syncServerSession: false }); } try { if (location && (location.pathname === '/login' || location.pathname === '/')) { window.location.assign('/feed'); } } catch {} } finally { lastToken = customToken; signing = false; hideSpinner(); } return; } if (data.type === 'auth:reauth-result' && data?.payload) { try { if (window.__pendingDesktopReauthResolve) { window.__pendingDesktopReauthResolve(data.payload); window.__pendingDesktopReauthResolve = null; } } catch {} return; } if (data.type === 'auth:logout') { try { if (window && window.__firebaseSignOut) { await window.__firebaseSignOut(); } } catch {} await performLogout(); return; } }); // Note: no request-auth polling; we only react to desktop broadcasts window.__teardownDesktopBridge = () => {}; })();

Simon