Improve cross-app SSO when switching from QR Plus to Events.

Keep the shared auth session alive with periodic pings, store OIDC refresh tokens for silent re-login, and route launcher links through SSO connect. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-07 12:06:13 +00:00
parent 2c1c3cdd3e
commit 1d5b85f774
4 changed files with 88 additions and 16 deletions
@@ -1,4 +1,13 @@
@if (auth()->check())
-    {{-- Same-site iframe keeps the shared auth.ladill.com session warm while using this app. --}}
-    <iframe src="https://{{ config('app.auth_domain') }}/sso/ping" hidden width="0" height="0" title=""></iframe>
+    @php $authPing = 'https://'.config('app.auth_domain').'/sso/ping'; @endphp
+    {{-- Same-site pings keep the shared auth.ladill.com session warm while using this app. --}}
+    <iframe src="{{ $authPing }}" hidden width="0" height="0" title=""></iframe>
+    <script>
+        (function () {
+            const pingUrl = @js($authPing);
+            const ping = () => fetch(pingUrl, { credentials: 'include', mode: 'no-cors' }).catch(() => {});
+            ping();
+            setInterval(ping, 5 * 60 * 1000);
+        })();
+    </script>
@endif