Check if SSO is Enabled Before Login Platform Account (#174)

Check if SSO is enabled before login platform account.
BoltApp · Aug 3, 2023 · 9dfb1bc · 9dfb1bc
1 parent 82b4084
commit 9dfb1bc
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 5 deletions.
diff --git a/cartridges/int_bolt_embedded_sfra/cartridge/controllers/Bolt.js b/cartridges/int_bolt_embedded_sfra/cartridge/controllers/Bolt.js
@@ -8,6 +8,7 @@ var Resource = require('dw/web/Resource');
 var BasketMgr = require('dw/order/BasketMgr');
 var Transaction = require('dw/system/Transaction');
 var CustomerMgr = require('dw/customer/CustomerMgr');
+var Site = require('dw/system/Site');
 
 // Script includes
 var LogUtils = require('~/cartridge/scripts/util/boltLogUtils');
@@ -22,6 +23,7 @@ var log = LogUtils.getLogger('Bolt');
 server.get('FetchOAuthToken', server.middleware.https, function (req, res, next) {
     var response = oAuth.fetchNewToken(req.querystring.code, req.querystring.scope);
     var returnObject = {};
+    var isSSOEnabled = Site.getCurrent().getCustomPreferenceValue('boltEnableSSO');
 
     if (response.status === HttpResult.OK) {
         returnObject.accessToken = response.result.access_token;
@@ -32,11 +34,16 @@ server.get('FetchOAuthToken', server.middleware.https, function (req, res, next)
         // store OAuth token expire time in milliseconds, 1000 -> ONE_SECOND
         session.privacy.boltOAuthTokenExpire = response.result.expires_in * 1000
             + new Date().getTime();
-        var currentBasket = BasketMgr.getCurrentOrNewBasket();
-        Transaction.wrap(function () {
-            currentBasket.custom.boltEmbeddedAccountsTokens = JSON.stringify(response.result);
-        });
-        account.loginOrCreatePlatformAccount(response.result.id_token);
+
+        // login platform account use the id token in response if sso enabled
+        if (isSSOEnabled) {
+            var currentBasket = BasketMgr.getCurrentOrNewBasket();
+            Transaction.wrap(function () {
+                currentBasket.custom.boltEmbeddedAccountsTokens = JSON.stringify(response.result);
+            });
+            account.loginOrCreatePlatformAccount(response.result.id_token);
+        }
+
         account.removeFallbackLogoutCookie(res);
         log.info('fetching oauth token succeeded');
     } else {

diff --git a/cartridges/int_bolt_embedded_sfra/cartridge/scripts/services/account.js b/cartridges/int_bolt_embedded_sfra/cartridge/scripts/services/account.js
@@ -255,6 +255,7 @@ exports.removeFallbackLogoutCookie = function (res) {
 };
 
 /**
+ * Used for SSO login from checkout step
  * Create a new external authenticated account if no existing account and login the shopper to SFCC platform
  * @param {string} idToken - A JWT token issued when the request includes the scope open_id
  */