fix silent auth: messages not from auth0 iframe (#44)

Geczy · luisrudge · commit 20a3719c0db4 · 2017-09-29T16:04:18.000-03:00
* fix silent auth: messages not from auth0 iframe
diff --git a/05-Token-Renewal/silent.html b/05-Token-Renewal/silent.html
@@ -4,25 +4,11 @@
   <meta charset="utf-8">
   <script src="https://cdn.auth0.com/js/auth0/8.8/auth0.min.js"></script>
   <script>
-    var AUTH0_CLIENT_ID = '{CLIENT_ID}';
-    var AUTH0_DOMAIN = '{DOMAIN}';
-
-    if (!AUTH0_CLIENT_ID || !AUTH0_DOMAIN) {
-      alert('Make sure to set the AUTH0_CLIENT_ID and AUTH0_DOMAIN variables in silent.html.');
-    }
-
-    var webAuth = new auth0.WebAuth({
-      domain: AUTH0_DOMAIN,
-      clientID: AUTH0_CLIENT_ID,
-      scope: 'openid profile',
-      responseType: 'token id_token',
-      redirectUri: 'http://localhost:3000'
-    });
-  </script>
-  <script>
-    webAuth.parseHash(window.location.hash, function (err, response) {
-      parent.postMessage(err || response, 'http://localhost:3000');
-    });
+      parent.postMessage({
+          hash: window.location.hash,
+          type: 'auth0:silent-authentication'
+        }, "http://localhost:3000/");
+    };
   </script>
 </head>
 <body></body>
diff --git a/05-Token-Renewal/src/Auth/Auth.js b/05-Token-Renewal/src/Auth/Auth.js
@@ -101,7 +101,8 @@ export default class Auth {
       {
         audience: AUTH_CONFIG.apiUrl,
         redirectUri: AUTH_CONFIG.silentAuthRedirect,
-        usePostMessage: true
+        usePostMessage: true,
+        postMessageDataType: 'auth0:silent-authentication',
       },
       (err, result) => {
         if (err) {
