From a5a26f81ee836be07efcb5b367301d3b6f392c90 Mon Sep 17 00:00:00 2001
From: dadachann <185672915+dadachann@users.noreply.github.com>
Date: Thu, 30 Jul 2026 20:05:17 +0000
Subject: [PATCH] feat(auth): accept direct Space launch assertions

---
 web/src/app/auth/space/callback/page.tsx | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/web/src/app/auth/space/callback/page.tsx b/web/src/app/auth/space/callback/page.tsx
index 33f3a4846..9b3f9112a 100644
--- a/web/src/app/auth/space/callback/page.tsx
+++ b/web/src/app/auth/space/callback/page.tsx
@@ -207,8 +207,16 @@ function SpaceOAuthCallbackContent() {
     const errorDescription = searchParams.get('error_description');
     const mode = searchParams.get('mode');
     const state = searchParams.get('state');
-    const workspaceUuid = searchParams.get('workspace_uuid');
-    const launchAssertion = searchParams.get('launch_assertion');
+    const fragmentParams = new URLSearchParams(
+      window.location.hash.startsWith('#')
+        ? window.location.hash.slice(1)
+        : window.location.hash,
+    );
+    const workspaceUuid =
+      fragmentParams.get('workspace_uuid') ?? searchParams.get('workspace_uuid');
+    const launchAssertion =
+      fragmentParams.get('launch_assertion') ??
+      searchParams.get('launch_assertion');
 
     if (error) {
       setStatus('error');