fix(auth): add automatic browser redirect to signInWithSSO

Author: mandarini

packages/core/auth-js/src/GoTrueClient.ts

@@ -1334,6 +1334,12 @@ export default class GoTrueClient {
         headers: this.headers,
         xform: _ssoResponse,
       })
+
+      // Automatically redirect in browser unless skipBrowserRedirect is true
+      if (result.data?.url && isBrowser() && !params.options?.skipBrowserRedirect) {
+        window.location.assign(result.data.url)
+      }
+
       return this._returnResult(result)
     } catch (error) {
       if (isAuthError(error)) {

packages/core/auth-js/src/lib/types.ts

@@ -786,6 +786,12 @@ export type SignInWithSSO =
         redirectTo?: string
         /** Verification token received when the user completes the captcha on the site. */
         captchaToken?: string
+        /**
+         * If set to true, the redirect will not happen on the client side.
+         * This parameter is used when you wish to handle the redirect yourself.
+         * Defaults to false.
+         */
+        skipBrowserRedirect?: boolean
       }
     }
   | {
@@ -797,6 +803,12 @@ export type SignInWithSSO =
         redirectTo?: string
         /** Verification token received when the user completes the captcha on the site. */
         captchaToken?: string
+        /**
+         * If set to true, the redirect will not happen on the client side.
+         * This parameter is used when you wish to handle the redirect yourself.
+         * Defaults to false.
+         */
+        skipBrowserRedirect?: boolean
       }
     }
 

packages/core/auth-js/test/GoTrueClient.test.ts

@@ -3100,6 +3100,25 @@ describe('SSO Authentication', () => {
     expect(data).toBeNull()
   })
 
+  test('signInWithSSO should support skipBrowserRedirect option', async () => {
+    // Note: In a browser environment with SAML enabled, signInWithSSO would
+    // automatically redirect to the SSO provider unless skipBrowserRedirect is true.
+    // This test verifies the option is accepted (actual redirect behavior cannot
+    // be tested in Node.js environment)
+    const { data, error } = await pkceClient.signInWithSSO({
+      providerId: 'valid-provider-id',
+      options: {
+        redirectTo: 'http://localhost:3000/callback',
+        skipBrowserRedirect: true,
+      },
+    })
+
+    // SAML is disabled in test environment, so we expect an error
+    expect(error).not.toBeNull()
+    expect(error?.message).toContain('SAML 2.0 is disabled')
+    expect(data).toBeNull()
+  })
+
   test.each([
     {
       name: 'with empty options',