listen for post messages

Gemfile.lock

@@ -22,7 +22,7 @@ GIT
 
 GIT
   remote: git://github.com/travis-ci/travis-api.git
-  revision: 6606af4b43ef64d3ef97efeddda8524aff7c5281
+  revision: 8a16b77281680ad637e998b5cf79b6cdff866502
   branch: sf-use-services
   specs:
     travis-api (0.0.1)

assets/javascripts/app/app.coffee

@@ -38,9 +38,9 @@ Travis.reopen
       @setCurrentUser(JSON.parse($.cookie('user')))
 
     signIn: ->
-      # user = Travis.Auth.signIn()
+      user = Travis.Auth.signIn()
       # console.log(user)
-      @setCurrentUser(@USER_PAYLOAD)
+      #@setCurrentUser(@USER_PAYLOAD)
       @render.apply(this, @get('returnTo') || ['home', 'index'])
 
     signOut: ->

assets/javascripts/lib/travis/auth.coffee

@@ -1,5 +1,7 @@
 @Travis.Auth = ->
-  $ => @iframe.appendTo('body')
+  $ =>
+    @iframe.appendTo('body')
+    window.addEventListener("message", @receiveMessage)
   this
 
 $.extend Travis.Auth,
@@ -11,7 +13,21 @@ $.extend Travis.Auth,
 $.extend Travis.Auth.prototype,
   iframe: $('<iframe id="auth-frame" />').hide()
 
-  signIn: ->
+  expectedOrigin: ->
+    if Travis.config.api_endpoint[0] == '/'
+      window.location.protocol + "://" + window.location.host
+    else
+      Travis.config.api_endpoint
+
+  receiveMessage: (event) ->
+    if event.origin != @expectedOrigin()
+      console.log("unexpected message #{event.origin}: #{event.data}")
+    else
+      Travis.config.access_token = event.data
+
+  trySignIn: ->
     @iframe.attr('src', "#{Travis.config.api_endpoint}/auth/post_message")
-    @iframe.show()
     console.log('sign in!')
+
+  signIn: ->
+    @trySignIn()