From 557f904af070d755bfccfa98436a6a8763581740 Mon Sep 17 00:00:00 2001
From: Galindo97 <agalindo@aduanasoft.com.mx>
Date: Wed, 20 May 2026 15:49:28 -0500
Subject: [PATCH] fix(auth): cambiar client_id de Keycloak de anexo76-frontend
 a hub-frontend
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Anexo76 no es independiente del Hub/Workspace — comparten el mismo
cliente de Keycloak (hub-frontend). anexo76-frontend no existe en KC.

- Dockerfile.prod: agrega ARG/ENV VITE_KEYCLOAK_CLIENT_ID=hub-frontend
- workspace-auth.ts: actualiza fallback de 'anexo76-frontend' a 'hub-frontend'
- .env.example: actualiza a hub-frontend
- Jenkinsfile: pasa --build-arg VITE_KEYCLOAK_CLIENT_ID=hub-frontend al build

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 Jenkinsfile                               | 1 +
 frontend/.env.example                     | 4 ++--
 frontend/Dockerfile.prod                  | 3 +++
 frontend/src/lib/server/workspace-auth.ts | 2 +-
 4 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index 10f0ad82..edde2aba 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -273,6 +273,7 @@ pipeline {
                                 docker build --progress=plain \
                                     --build-arg VITE_API_URL=\${A76_URL}/api/ \
                                     --build-arg VITE_KEYCLOAK_URL=\${A76_URL}/kcauth/ \
+                                    --build-arg VITE_KEYCLOAK_CLIENT_ID=hub-frontend \
                                     --build-arg INTERNAL_API_URL=http://backend:3467/api/ \
                                     -t ${IMAGE_FRONTEND}:${env.APP_VERSION} \
                                     -t ${IMAGE_FRONTEND}:latest \
diff --git a/frontend/.env.example b/frontend/.env.example
index d4cf3ba4..fbc32cfa 100644
--- a/frontend/.env.example
+++ b/frontend/.env.example
@@ -12,10 +12,10 @@ INTERNAL_HUB_URL=http://localhost:8001
 # Keycloak
 VITE_KEYCLOAK_URL=http://localhost:8085/kcauth
 VITE_KEYCLOAK_REALM=master
-VITE_KEYCLOAK_CLIENT_ID=anexo76-frontend
+VITE_KEYCLOAK_CLIENT_ID=hub-frontend
 KEYCLOAK_URL=http://localhost:8085/kcauth
 KEYCLOAK_REALM=master
-KEYCLOAK_CLIENT_ID=anexo76-frontend
+KEYCLOAK_CLIENT_ID=hub-frontend
 # KEYCLOAK_CLIENT_SECRET=  # solo si el cliente KC no es público
 
 # SvelteKit — necesario para cookies secure y URLs SSR correctas
diff --git a/frontend/Dockerfile.prod b/frontend/Dockerfile.prod
index 8c3cc1bd..83b5b005 100644
--- a/frontend/Dockerfile.prod
+++ b/frontend/Dockerfile.prod
@@ -22,6 +22,9 @@ ENV VITE_API_URL=${VITE_API_URL}
 ARG VITE_KEYCLOAK_URL
 ENV VITE_KEYCLOAK_URL=${VITE_KEYCLOAK_URL}
 
+ARG VITE_KEYCLOAK_CLIENT_ID=hub-frontend
+ENV VITE_KEYCLOAK_CLIENT_ID=${VITE_KEYCLOAK_CLIENT_ID}
+
 ARG INTERNAL_API_URL
 ENV INTERNAL_API_URL=${INTERNAL_API_URL}
 
diff --git a/frontend/src/lib/server/workspace-auth.ts b/frontend/src/lib/server/workspace-auth.ts
index e9902830..d6415f03 100644
--- a/frontend/src/lib/server/workspace-auth.ts
+++ b/frontend/src/lib/server/workspace-auth.ts
@@ -93,7 +93,7 @@ export function getKeycloakRealm(): string {
 }
 
 export function getKeycloakClientId(): string {
-	return (env.KEYCLOAK_CLIENT_ID || env.VITE_KEYCLOAK_CLIENT_ID || 'anexo76-frontend').trim();
+	return (env.KEYCLOAK_CLIENT_ID || env.VITE_KEYCLOAK_CLIENT_ID || 'hub-frontend').trim();
 }
 
 export function getCleanReturnPath(url: URL): string {