Fix redirect params placement for hash-based route URLs

Author: carl-wells-crowdhandler

dist/crowdhandler.cjs.js

@@ -561,34 +561,38 @@ var Gatekeeper = /** @class */ (function () {
             }
             // Decode once to get the actual URL
             var decodedURL = decodeURIComponent(destinationUrl);
-            // Parse URL to handle parameters properly
-            var urlParts = decodedURL.split('?');
-            var baseUrl = urlParts[0];
-            var queryString = urlParts[1] || '';
-            // Parse existing parameters while preserving their values
+            // Build new CrowdHandler parameters
+            var chParams = [
+                "ch-id=".concat(encodeURIComponent(this.token || '')),
+                "ch-id-signature=".concat(encodeURIComponent(((_d = (_c = this.sessionStatus) === null || _c === void 0 ? void 0 : _c.result) === null || _d === void 0 ? void 0 : _d.hash) || '')),
+                "ch-requested=".concat(encodeURIComponent(((_f = (_e = this.sessionStatus) === null || _e === void 0 ? void 0 : _e.result) === null || _f === void 0 ? void 0 : _f.requested) || this.requested || this.specialParameters.chRequested || '')),
+                "ch-code=".concat(encodeURIComponent(this.specialParameters.chCode || '')),
+                "ch-fresh=true"
+            ];
+            // Separate hash fragment before parsing query params. This ensures
+            // ch-* params are placed in the real query string (window.location.search)
+            // rather than inside the hash fragment where host-domain scripts cannot
+            // read them via URLSearchParams.
+            var hashIndex = decodedURL.indexOf('#');
+            var urlWithoutHash = hashIndex !== -1 ? decodedURL.substring(0, hashIndex) : decodedURL;
+            var hashPart = hashIndex !== -1 ? decodedURL.substring(hashIndex) : '';
+            // Parse existing query string, stripping any existing ch-* params
+            var _g = urlWithoutHash.split('?'), baseUrl = _g[0], queryParts = _g.slice(1);
+            var queryString = queryParts.join('?');
             var existingParams = [];
             if (queryString) {
                 var params = queryString.split('&');
                 for (var _i = 0, params_1 = params; _i < params_1.length; _i++) {
                     var param = params_1[_i];
                     var key = param.split('=')[0];
-                    // Skip CrowdHandler parameters
                     if (!['ch-id', 'ch-id-signature', 'ch-requested', 'ch-code', 'ch-fresh'].includes(key)) {
                         existingParams.push(param);
                     }
                 }
             }
-            // Build new CrowdHandler parameters
-            var chParams = [
-                "ch-id=".concat(encodeURIComponent(this.token || '')),
-                "ch-id-signature=".concat(encodeURIComponent(((_d = (_c = this.sessionStatus) === null || _c === void 0 ? void 0 : _c.result) === null || _d === void 0 ? void 0 : _d.hash) || '')),
-                "ch-requested=".concat(encodeURIComponent(((_f = (_e = this.sessionStatus) === null || _e === void 0 ? void 0 : _e.result) === null || _f === void 0 ? void 0 : _f.requested) || this.requested || this.specialParameters.chRequested || '')),
-                "ch-code=".concat(encodeURIComponent(this.specialParameters.chCode || '')),
-                "ch-fresh=true"
-            ];
-            // Construct final URL
+            // Construct final URL with ch-* params before any hash fragment
             var allParams = existingParams.concat(chParams);
-            var finalUrl = baseUrl + (allParams.length > 0 ? '?' + allParams.join('&') : '');
+            var finalUrl = baseUrl + (allParams.length > 0 ? '?' + allParams.join('&') : '') + hashPart;
             (0, logger_1.logger)(this.options.debug, "info", "[WaitingRoom] Redirecting promoted user to: ".concat(finalUrl));
             return this.REQUEST.redirect(finalUrl);
         }