mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-12 13:47:01 +00:00
keycloak-js dropped the UMD build in 26.0.0. The package now ships only lib/keycloak.js with "type": "module" and a default export, so the CDN path dist/keycloak.js resolves to a file that no longer exists, and a classic script tag could not parse the file that does. The adapter never loaded, window.__oidcLoginReady was never set, and every app job that co-deploys the dashboard failed its Playwright run on the resulting console error. The loader now uses a dynamic import and takes the constructor from the module's default export. That also retires the window.Keycloak check, which had nothing left to check once the global stopped existing. Module fetches always run in CORS mode, unlike classic script loads. The internal CDN emitted no Access-Control-Allow-Origin at all, so it could not have served an ES module to the dashboard's origin. jsdelivr sends "*", which is why the external flavor would have hidden the gap. Every init option the template passes carries the same default in 24.0.5 and 26.2.4, and the silent-SSO postMessage contract is unchanged, so the adapter's behaviour is untouched beyond the packaging. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>