fix(youtube): default websocket auth to sso bridge

Author: steveseguin

sources/websocket/youtube.html

@@ -270,7 +270,8 @@ <h4>Advanced Controls</h4>
     var YT_ADMIN_SCOPES = YT_READONLY_SCOPES.concat([
         'https://www.googleapis.com/auth/youtube.force-ssl'
     ]);
-    var AUTH_BASE_URL = 'https://ytauth.socialstream.ninja';
+    var AUTH_BASE_URL = 'https://sso.socialstream.ninja/youtube';
+    var LEGACY_AUTH_BASE_URL = 'https://ytauth.socialstream.ninja';
     var DEFAULT_YT_CLIENT_ID = '689627108309-isbjas8fmbc7sucmbm7gkqjapk7btbsi.apps.googleusercontent.com';
     var YT_ACCESS_LEVEL_KEY = 'youtubeOAuthAccessLevel';
     var YT_AUTH_SOURCE_KEY = 'youtubeOAuthSource';
@@ -4318,6 +4319,37 @@ <h4>Advanced Controls</h4>
 			? bridge
 			: null;
 	}
+	function shouldFallbackToLegacyYouTubeAuth(error) {
+		const status = Number(error && error.status);
+		return !status || status === 405 || status >= 500;
+	}
+	async function postHostedYouTubeAuthJson(path, payload) {
+		async function postToBase(baseUrl) {
+			const response = await fetch(baseUrl + path, {
+				method: 'POST',
+				headers: { 'Content-Type': 'application/json' },
+				body: JSON.stringify(payload)
+			});
+			const data = await response.json().catch(() => ({}));
+			if (!response.ok) {
+				const msg = data?.error_description || data?.error || `HTTP error! status: ${response.status}`;
+				const error = new Error(msg);
+				error.status = response.status;
+				error.payload = data;
+				throw error;
+			}
+			return data;
+		}
+		try {
+			return await postToBase(AUTH_BASE_URL);
+		} catch (error) {
+			if (AUTH_BASE_URL !== LEGACY_AUTH_BASE_URL && shouldFallbackToLegacyYouTubeAuth(error)) {
+				console.warn('YouTube SSO bridge failed; falling back to legacy ytauth bridge.', error);
+				return postToBase(LEGACY_AUTH_BASE_URL);
+			}
+			throw error;
+		}
+	}
 	async function refreshAccessToken(refreshTokenValue) {
 		if (!refreshTokenValue) {
             console.log('No refresh token available for refreshAccessToken.');
@@ -4344,16 +4376,10 @@ <h4>Advanced Controls</h4>
 					clientSecret: credentials.clientSecret
 				});
 			} else {
-				const response = await fetch(AUTH_BASE_URL + '/refresh', {
-					method: 'POST',
-					headers: { 'Content-Type': 'application/json' },
-					body: JSON.stringify({ refresh_token: refreshTokenValue, client_id: DEFAULT_YT_CLIENT_ID })
+				data = await postHostedYouTubeAuthJson('/refresh', {
+					refresh_token: refreshTokenValue,
+					client_id: DEFAULT_YT_CLIENT_ID
 				});
-				data = await response.json().catch(() => ({}));
-				if (!response.ok) {
-					const msg = data?.error_description || data?.error || `HTTP error! status: ${response.status}`;
-					throw new Error(msg);
-				}
 			}
 			if (!data || !data.access_token) {
 				throw new Error('Token refresh response did not include access_token.');
@@ -4401,16 +4427,11 @@ <h4>Advanced Controls</h4>
 					clientSecret: credentials.clientSecret
 				});
 			} else {
-				const response = await fetch(AUTH_BASE_URL + '/token', {
-					method: 'POST',
-					headers: { 'Content-Type': 'application/json' },
-					body: JSON.stringify({ code: code, redirect_uri: redirectTarget, client_id: DEFAULT_YT_CLIENT_ID })
+				data = await postHostedYouTubeAuthJson('/token', {
+					code: code,
+					redirect_uri: redirectTarget,
+					client_id: DEFAULT_YT_CLIENT_ID
 				});
-				data = await response.json().catch(() => ({}));
-				if (!response.ok) {
-					const msg = data?.error_description || data?.error || `HTTP error! status: ${response.status}`;
-					throw new Error(msg);
-				}
 			}
 			if (!data.access_token) {
 				throw new Error('Token exchange response did not include access_token.');