hyungi/tk-factory-services
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(sso): 인앱 브라우저 SSO 토큰 릴레이 — 카톡 WebView 쿠키 미공유 해결

Browse Source 
카카오톡 인앱 WebView는 서브도메인 간 쿠키를 공유하지 않아
tkds에서 로그인 후 tkfb로 리다이렉트 시 인증이 풀리는 문제.

- sso-relay.js: URL hash의 _sso= 토큰을 로컬 쿠키+localStorage로 설정
- gateway dashboard: 로그인 후 redirect URL에 #_sso=<token> 추가
- 전 서비스 HTML: core JS 직전에 sso-relay.js 로드 (81개 파일)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Hyungi Ahn
2026-04-01 15:44:02 +09:00
parent de6d918d42
commit 0de9d5bb48
90 changed files with 398 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
gateway/html/dashboard.html
View File

@@ -781,7 +781,8 @@
var redirect = new URLSearchParams(location.search).get('redirect');
if (redirect && isSafeRedirect(redirect)) {
window.location.href = redirect;
var sep = redirect.indexOf('#') === -1 ? '#' : '&';
window.location.href = redirect + sep + '_sso=' + encodeURIComponent(data.access_token);
} else {
window.location.href = '/dashboard';
}
@@ -840,7 +841,8 @@
// Already logged in + redirect param
var redirect = params.get('redirect');
if (redirect && isSafeRedirect(redirect)) {
window.location.href = redirect;
var sep = redirect.indexOf('#') === -1 ? '#' : '&';
window.location.href = redirect + sep + '_sso=' + encodeURIComponent(token);
return;
}

39
shared/frontend/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();

1
system1-factory/web/index.html
View File

@@ -10,6 +10,7 @@
if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then(function(r){r.forEach(function(reg){reg.unregister()});})}
if('caches' in window){caches.keys().then(function(k){k.forEach(function(key){caches.delete(key)})})}
</script>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script>
// SSO 토큰 확인

39
system1-factory/web/js/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();

1
system1-factory/web/pages/admin/attendance-report.html
View File

@@ -190,6 +190,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/admin/equipment-detail.html
View File

@@ -314,6 +314,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/admin/equipments.html
View File

@@ -190,6 +190,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/admin/purchase-analysis.html
View File

@@ -135,6 +135,7 @@
</div>
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/static/js/purchase-analysis.js?v=2026040103"></script>
</body>

1
system1-factory/web/pages/admin/repair-management.html
View File

@@ -507,6 +507,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script>

1
system1-factory/web/pages/attendance/annual-overview.html
View File

@@ -390,6 +390,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/checkin.html
View File

@@ -234,6 +234,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/daily.html
View File

@@ -70,6 +70,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/monthly-comparison.html
View File

@@ -162,6 +162,7 @@
<!-- Toast -->
<div id="toastContainer" class="toast-container"></div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031701"></script>
<script src="/js/monthly-comparison.js?v=2026040109"></script>

1
system1-factory/web/pages/attendance/monthly.html
View File

@@ -489,6 +489,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/my-monthly-confirm.html
View File

@@ -104,6 +104,7 @@
<!-- Toast -->
<div id="toastContainer" class="toast-container"></div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031701"></script>
<script src="/js/my-monthly-confirm.js?v=2026040106"></script>

1
system1-factory/web/pages/attendance/my-vacation-info.html
View File

@@ -267,6 +267,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/vacation-allocation.html
View File

@@ -353,6 +353,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script type="module" src="/js/vacation-allocation.js" defer></script>

1
system1-factory/web/pages/attendance/vacation-approval.html
View File

@@ -130,6 +130,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/vacation-input.html
View File

@@ -123,6 +123,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/vacation-management.html
View File

@@ -215,6 +215,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/vacation-request.html
View File

@@ -117,6 +117,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/attendance/work-status.html
View File

@@ -286,6 +286,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>

1
system1-factory/web/pages/dashboard-new.html
View File

@@ -47,6 +47,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/production-dashboard.js?v=2026040103"></script>
<script src="/static/js/shared-bottom-nav.js?v=2026040103"></script>

1
system1-factory/web/pages/dashboard.html
View File

@@ -324,6 +324,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script type="module" src="/js/modern-dashboard.js?v=2026031401"></script>

1
system1-factory/web/pages/inspection/daily-patrol.html
View File

@@ -209,6 +209,7 @@
}, 50);
})();
</script>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="/js/daily-patrol.js?v=2026031401"></script>

1
system1-factory/web/pages/inspection/zone-detail.html
View File

@@ -304,6 +304,7 @@
}, 50);
})();
</script>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="/js/zone-detail.js?v=2026031401"></script>

1
system1-factory/web/pages/profile/info.html
View File

@@ -320,6 +320,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script type="module" src="/js/my-profile.js"></script>

1
system1-factory/web/pages/profile/password.html
View File

@@ -390,6 +390,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script>initAuth();</script>
<script src="/js/change-password.js?v=2026040101"></script>

1
system1-factory/web/pages/purchase/request-mobile.html
View File

@@ -97,6 +97,7 @@
<div class="pm-sheet-body" id="detailContent"></div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/static/js/purchase-request-mobile.js?v=2026040104"></script>
<script src="/static/js/shared-bottom-nav.js?v=2026040103"></script>

1
system1-factory/web/pages/purchase/request.html
View File

@@ -312,6 +312,7 @@
</div>
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/static/js/purchase-request.js?v=2026040104"></script>
</body>

3
system1-factory/web/pages/work/analysis.html
View File

@@ -277,6 +277,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script type="module" src="/js/work-analysis.js?v=2026031401"></script>
@@ -2871,4 +2872,4 @@
</script>
<script>initAuth();</script>
</body>
</html>
</html>

1
system1-factory/web/pages/work/daily-status.html
View File

@@ -163,6 +163,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031701"></script>
<script src="/js/daily-status.js?v=2026033001"></script>

1
system1-factory/web/pages/work/meeting-detail.html
View File

@@ -193,6 +193,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/meeting-detail.js?v=2026031701"></script>
</body>

1
system1-factory/web/pages/work/meetings.html
View File

@@ -80,6 +80,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/meetings.js?v=2026031701"></script>
</body>

1
system1-factory/web/pages/work/proxy-input.html
View File

@@ -114,6 +114,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031701"></script>
<script src="/js/proxy-input.js?v=2026033202"></script>

1
system1-factory/web/pages/work/report-create-mobile.html
View File

@@ -190,6 +190,7 @@
</div>
<!-- 공통 모듈 -->
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="/js/common/utils.js?v=2026031401"></script>

1
system1-factory/web/pages/work/report-create.html
View File

@@ -149,6 +149,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031401"></script>
<script src="/js/common/utils.js?v=2026031401"></script>

1
system1-factory/web/pages/work/schedule.html
View File

@@ -347,6 +347,7 @@
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/schedule.js?v=2026031701"></script>
<script>

1
system1-factory/web/pages/work/tbm-create.html
View File

@@ -843,6 +843,7 @@
</div>
<!-- Scripts -->
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026040101"></script>
<!-- 공통 모듈 -->

1
system1-factory/web/pages/work/tbm-mobile.html
View File

@@ -264,6 +264,7 @@
</div>
<!-- 공통 모듈 -->
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026040101"></script>
<script src="/js/common/utils.js?v=2026040101"></script>

1
system1-factory/web/pages/work/tbm.html
View File

@@ -573,6 +573,7 @@
<!-- 토스트 -->
<div class="toast-container" id="toastContainer"></div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/api-base.js?v=2026031602"></script>
<script src="/js/common/utils.js?v=2026031602"></script>

39
system2-report/web/js/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();

1
system2-report/web/pages/safety/chat-report.html
View File

@@ -6,6 +6,7 @@
<title>AI 신고 도우미 | (주)테크니컬코리아</title>
<link rel="icon" type="image/png" href="/img/favicon.png">
<link rel="stylesheet" href="/css/chat-report.css?v=2026031401">
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/js/api-base.js?v=2026040101"></script>
<script src="/js/app-init.js?v=2026031401" defer></script>
</head>

1
system2-report/web/pages/safety/issue-detail.html
View File

@@ -8,6 +8,7 @@
<link rel="stylesheet" href="/css/common.css?v=2026031401">
<link rel="stylesheet" href="/css/project-management.css?v=2026031401">
<link rel="icon" type="image/png" href="/img/favicon.png">
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/js/api-base.js?v=2026040101"></script>
<script src="/js/app-init.js?v=2026031401" defer></script>
<script src="https://instant.page/5.2.0" type="module"></script>

1
system2-report/web/pages/safety/issue-report.html
View File

@@ -5,6 +5,7 @@
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
<title>신고 등록 | (주)테크니컬코리아</title>
<link rel="icon" type="image/png" href="/img/favicon.png">
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/js/api-base.js?v=2026040101"></script>
<script src="/js/app-init.js?v=2026031401" defer></script>
<style>

1
system2-report/web/pages/safety/report-status.html
View File

@@ -8,6 +8,7 @@
<link rel="stylesheet" href="/css/common.css?v=2026031401">
<link rel="stylesheet" href="/css/project-management.css?v=2026031401">
<link rel="icon" type="image/png" href="/img/favicon.png">
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/js/api-base.js?v=2026040101"></script>
<script src="/js/app-init.js?v=2026031401" defer></script>
<script src="https://instant.page/5.2.0" type="module"></script>

1
system3-nonconformance/web/ai-assistant.html
View File

@@ -277,6 +277,7 @@
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/core/page-manager.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>
<script src="/static/js/utils/toast.js?v=2026031401"></script>

1
system3-nonconformance/web/issue-view.html
View File

@@ -111,6 +111,7 @@
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/core/page-manager.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>
<script src="/static/js/utils/photo-modal.js?v=2026031401"></script>

1
system3-nonconformance/web/issues-archive.html
View File

@@ -201,6 +201,7 @@
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/core/page-manager.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>
<script src="/static/js/utils/photo-modal.js?v=2026031401"></script>

1
system3-nonconformance/web/issues-dashboard.html
View File

@@ -554,6 +554,7 @@
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/core/page-manager.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>
<script src="/static/js/utils/photo-modal.js?v=2026031401"></script>

1
system3-nonconformance/web/issues-inbox.html
View File

@@ -373,6 +373,7 @@
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/core/page-manager.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/components/mobile-calendar.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>

1
system3-nonconformance/web/issues-management.html
View File

@@ -343,6 +343,7 @@
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/core/page-manager.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>
<script src="/static/js/utils/photo-modal.js?v=2026031401"></script>

1
system3-nonconformance/web/m/dashboard.html
View File

@@ -186,6 +186,7 @@
<!-- 스크립트 -->
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/core/permissions.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>

1
system3-nonconformance/web/m/inbox.html
View File

@@ -194,6 +194,7 @@
<!-- 스크립트 -->
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/core/permissions.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>

1
system3-nonconformance/web/m/management.html
View File

@@ -174,6 +174,7 @@
<!-- 스크립트 -->
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script src="/static/js/core/permissions.js?v=2026031401"></script>
<script src="/static/js/utils/issue-helpers.js?v=2026031401"></script>

1
system3-nonconformance/web/reports-daily.html
View File

@@ -185,6 +185,7 @@
<script src="/static/js/core/permissions.js?v=2026031401"></script>
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script>

1
system3-nonconformance/web/reports-monthly.html
View File

@@ -72,6 +72,7 @@
<script src="/static/js/core/permissions.js?v=2026031401"></script>
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script>

1
system3-nonconformance/web/reports-weekly.html
View File

@@ -71,6 +71,7 @@
<script src="/static/js/core/permissions.js?v=2026031401"></script>
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script>

1
system3-nonconformance/web/reports.html
View File

@@ -173,6 +173,7 @@
<script src="/static/js/core/permissions.js?v=2026031401"></script>
<script src="/static/js/components/common-header.js?v=2026031401"></script>
<script src="/static/js/api.js?v=2026031401"></script>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/core/auth-manager.js?v=2026031401"></script>
<script>

39
system3-nonconformance/web/static/js/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();

1
tkpurchase/web/accounts.html
View File

@@ -133,6 +133,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-accounts.js?v=2026031601"></script>
<script>initAccountsPage();</script>

1
tkpurchase/web/daylabor.html
View File

@@ -148,6 +148,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-daylabor.js?v=2026031601"></script>
<script>initDayLaborPage();</script>

1
tkpurchase/web/index.html
View File

@@ -88,6 +88,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-dashboard.js?v=2026031601"></script>
<script>initDashboard();</script>

1
tkpurchase/web/partner-history.html
View File

@@ -61,6 +61,7 @@
<div id="historyPagination" class="mt-4 flex justify-center gap-2"></div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-partner-history.js?v=2026031602"></script>
<script>initPartnerHistory();</script>

1
tkpurchase/web/partner-portal.html
View File

@@ -81,6 +81,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-partner-portal.js?v=2026031602"></script>
<script>initPartnerPortal();</script>

1
tkpurchase/web/partner.html
View File

@@ -294,6 +294,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-partner.js?v=2026031601"></script>
<script>initPartnerPage();</script>

1
tkpurchase/web/schedule.html
View File

@@ -275,6 +275,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-schedule.js?v=2026031602"></script>
<script>initSchedulePage();</script>

39
tkpurchase/web/static/js/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();

1
tkpurchase/web/workreport-summary.html
View File

@@ -100,6 +100,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-workreport-summary.js?v=2026031601"></script>
<script>initSummaryPage();</script>

1
tkpurchase/web/workreport.html
View File

@@ -114,6 +114,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkpurchase-core.js?v=2026040101"></script>
<script src="/static/js/tkpurchase-workreport.js?v=2026031601"></script>
<script>initWorkReportPage();</script>

1
tksafety/web/checklist.html
View File

@@ -164,6 +164,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-checklist.js?v=2026031401"></script>
<script>initChecklistPage();</script>

1
tksafety/web/education.html
View File

@@ -190,6 +190,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-education.js?v=2026031401"></script>
<script>initEducationPage();</script>

1
tksafety/web/entry-dashboard.html
View File

@@ -106,6 +106,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-entry-dashboard.js?v=2026031401"></script>
<script>initEntryDashboard();</script>

1
tksafety/web/index.html
View File

@@ -277,6 +277,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-visit.js?v=2026031401"></script>
<script>initVisitPage();</script>

1
tksafety/web/risk-assess.html
View File

@@ -210,6 +210,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-risk.js?v=2026031501"></script>
<script>initRiskAssessPage();</script>

1
tksafety/web/risk-projects.html
View File

@@ -166,6 +166,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-risk.js?v=2026031501"></script>
<script>

39
tksafety/web/static/js/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();

1
tksafety/web/training.html
View File

@@ -214,6 +214,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-training.js"></script>
<script>initTrainingPage();</script>

1
tksafety/web/visit-management.html
View File

@@ -184,6 +184,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-visit-management.js?v=2026031401"></script>
<script>initVisitManagementPage();</script>

1
tksafety/web/visit-request.html
View File

@@ -148,6 +148,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksafety-core.js?v=2026040101"></script>
<script src="/static/js/tksafety-visit-request.js?v=2026031401"></script>
<script>initVisitRequestPage();</script>

1
tksupport/web/company-holidays.html
View File

@@ -108,6 +108,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksupport-core.js?v=2026040101"></script>
<script>
async function initPage() {

1
tksupport/web/index.html
View File

@@ -123,6 +123,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksupport-core.js?v=2026040101"></script>
<script>
let vacationTypes = [];

39
tksupport/web/static/js/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();

1
tksupport/web/vacation-admin.html
View File

@@ -113,6 +113,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksupport-core.js?v=2026040101"></script>
<script>
const TYPE_COLOR = {

1
tksupport/web/vacation-approval.html
View File

@@ -203,6 +203,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksupport-core.js?v=2026040101"></script>
<script>
let reviewAction = '';

1
tksupport/web/vacation-dashboard.html
View File

@@ -145,6 +145,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksupport-core.js?v=2026040101"></script>
<script>
const TYPE_COLOR = {

1
tksupport/web/vacation-request.html
View File

@@ -84,6 +84,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksupport-core.js?v=2026040101"></script>
<script>
async function initRequestPage() {

1
tksupport/web/vacation-status.html
View File

@@ -120,6 +120,7 @@
</div>
</div>
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tksupport-core.js?v=2026040101"></script>
<script>
let cachedRequests = [];

1
user-management/web/index.html
View File

@@ -2418,6 +2418,7 @@
</div>
<!-- JS: Core (config, token, api, toast, helpers, init) -->
<script src="/static/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkuser-core.js?v=2026040101"></script>
<!-- JS: Tabs -->
<script src="/static/js/tkuser-tabs.js?v=2026032301"></script>

39
user-management/web/static/js/sso-relay.js Normal file
View File

@@ -0,0 +1,39 @@
/**
* SSO Token Relay — 인앱 브라우저(카카오톡 등) 서브도메인 쿠키 미공유 대응
*
* Canonical source: shared/frontend/sso-relay.js
* 전 서비스 동일 코드 — 수정 시 아래 파일 <20><><EFBFBD>체 갱신 필요:
* system1-factory/web/js/sso-relay.js
* system2-report/web/js/sso-relay.js
* system3-nonconformance/web/static/js/sso-relay.js
* user-management/web/static/js/sso-relay.js
* tkpurchase/web/static/js/sso-relay.js
* tksafety/web/static/js/sso-relay.js
* tksupport/web/static/js/sso-relay.js
*
* 동작: URL hash에 _sso= 파라미터가 있으면 토큰을 로컬 쿠키+localStorage에 설정하고 hash를 제거.
* gateway/dashboard.html에서 로그인 성공 후 redirect URL에 #_sso=<token>을 붙여 전달.
*/
(function() {
var hash = location.hash;
if (!hash || hash.indexOf('_sso=') === -1) return;
var match = hash.match(/[#&]_sso=([^&]*)/);
if (!match) return;
var token = decodeURIComponent(match[1]);
if (!token) return;
// 로컬(1st-party) 쿠키 설정
var cookie = 'sso_token=' + encodeURIComponent(token) + '; path=/; max-age=604800';
if (location.hostname.indexOf('technicalkorea.net') !== -1) {
cookie += '; domain=.technicalkorea.net; secure; samesite=lax';
}
document.cookie = cookie;
// localStorage 폴백
try { localStorage.setItem('sso_token', token); } catch (e) {}
// URL에서 hash 제거
history.replaceState(null, '', location.pathname + location.search);
})();