feat: add non-interactive SSO login flow for embedded/iframe deployments (closes #69)

2026-03-21 20:45:19 +01:00
parent 7c3c3b5f7b
commit 83a0a1e235
18 changed files with 674 additions and 123 deletions
@@ -31,10 +31,14 @@ export default async function RootLayout({
 }) {
  const locale = await getLocale();
  const nonce = (await headers()).get("x-nonce") ?? "";
+  const parentOrigin = process.env.NEXT_PUBLIC_PARENT_ORIGIN || "";

  return (
    <html lang={locale} suppressHydrationWarning>
      <head>
+        {parentOrigin && (
+          <meta name="parent-origin" content={parentOrigin} />
+        )}
        <script
          nonce={nonce}
          suppressHydrationWarning