Replace native WP.com sign in with web-based sign in

RELEASE-NOTES.txt

@@ -1,6 +1,6 @@
 25.5
 -----
-
+* [***] Use web-based sign-in flow (hidden under a feature flag) [#23675]
 
 25.4
 -----

WordPress/Classes/Login/WordPressDotComAuthenticator.swift

@@ -1,6 +1,7 @@
 import AuthenticationServices
 import Foundation
 import UIKit
+import WordPressAuthenticator
 
 import Alamofire
 
@@ -17,7 +18,64 @@ struct WordPressDotComAuthenticator {
         case unknown(Swift.Error)
     }
 
+    @MainActor
+    func signIn(from viewController: UINavigationController) async {
+        let token: String
+        do {
+            token = try await authenticate(from: viewController)
+        } catch {
+            if let error = error as? WordPressDotComAuthenticator.Error {
+                // Show an alert for non-cancellation errors.
+                // `.cancelled` error is thrown when user taps the cancel button in the presented Safari view controller.
+                if case .cancelled = error {
+                    // Do nothing
+                } else {
+                    // All other errors are unexpected.
+                    wpAssertionFailure("WP.com web login failed", userInfo: ["error": "\(error)"])
+
+                    let alert = UIAlertController(
+                        title: NSLocalizedString("wpComLogin.error.title", value: "Error", comment: "Error"),
+                        message: SharedStrings.Error.generic,
+                        preferredStyle: .alert
+                    )
+                    alert.addAction(UIAlertAction(title: SharedStrings.Button.close, style: .cancel, handler: nil))
+                    viewController.present(alert, animated: true)
+                }
+            } else {
+                wpAssertionFailure("WP.com web login failed", userInfo: ["error": "\(error)"])
+            }
+            return
+        }
+
+        let delegate = WordPressAuthenticator.shared.delegate!
+        let credentials = AuthenticatorCredentials(wpcom: WordPressComCredentials(authToken: token, isJetpackLogin: false, multifactor: false))
+        SVProgressHUD.show()
+        delegate.sync(credentials: credentials) {
+            SVProgressHUD.dismiss()
+
+            delegate.presentLoginEpilogue(
+                in: viewController,
+                for: credentials,
+                source: .custom(source: "web-login"),
+                onDismiss: { /* Do nothing */ }
+            )
+        }
+    }
+
     func authenticate(from viewController: UIViewController) async throws -> String {
+        WPAnalytics.track(.wpcomWebSignIn, properties: ["stage": "start"])
+
+        do {
+            let value = try await _authenticate(from: viewController)
+            WPAnalytics.track(.wpcomWebSignIn, properties: ["stage": "success"])
+            return value
+        } catch {
+            WPAnalytics.track(.wpcomWebSignIn, properties: ["stage": "error", "error": "\(error)"])
+            throw error
+        }
+    }
+
+    private func _authenticate(from viewController: UIViewController) async throws -> String {
         let clientId = ApiCredentials.client
         let clientSecret = ApiCredentials.secret
         let redirectURI = "x-wordpress-app://oauth2-callback"

WordPress/Classes/System/SplitViewRootPresenter.swift

@@ -181,18 +181,13 @@ final class SplitViewRootPresenter: RootViewPresenter {
     }
 
     @MainActor private func signIn() async {
-        WPAnalytics.track(.wpcomWebSignIn, properties: ["source": "sidebar", "stage": "start"])
-
         let token: String
         do {
             token = try await WordPressDotComAuthenticator().authenticate(from: splitVC)
         } catch {
-            WPAnalytics.track(.wpcomWebSignIn, properties: ["source": "sidebar", "stage": "error", "error": "\(error)"])
             return
         }
 
-        WPAnalytics.track(.wpcomWebSignIn, properties: ["source": "sidebar", "stage": "success"])
-
         SVProgressHUD.show()
         let credentials = WordPressComCredentials(authToken: token, isJetpackLogin: false, multifactor: false)
         WordPressAuthenticator.shared.delegate!.sync(credentials: .init(wpcom: credentials)) {

WordPress/Classes/System/WordPressAuthenticatorProtocol.swift

@@ -8,6 +8,24 @@ protocol WordPressAuthenticatorProtocol {
 
 extension WordPressAuthenticator: WordPressAuthenticatorProtocol {
     static func loginUI() -> UIViewController? {
-        Self.loginUI(showCancel: false, restrictToWPCom: false, onLoginButtonTapped: nil)
+        Self.loginUI(showCancel: false, restrictToWPCom: false, onLoginButtonTapped: nil, continueWithDotCom: { viewController in
+            // TODO: Replce with a remote feature flag.
+            // Enable web-based login for debug builds until the remote feature flag is available.
+            #if DEBUG
+            let webLoginEnabled = true
+            #else
+            let webLoginEnabled = false
+            #endif
+
+            guard webLoginEnabled, let navigationController = viewController.navigationController else {
+                return false
+            }
+
+            Task { @MainActor in
+                await WordPressDotComAuthenticator().signIn(from: navigationController)
+            }
+
+            return true
+        })
     }
 }

WordPress/Classes/ViewRelated/Me/Me Main/MeViewController.swift

@@ -525,18 +525,13 @@ class MeViewController: UITableViewController {
     ///
     fileprivate func promptForLoginOrSignup() {
         Task { @MainActor in
-            WPAnalytics.track(.wpcomWebSignIn, properties: ["source": "me", "stage": "start"])
-
             let token: String
             do {
                 token = try await WordPressDotComAuthenticator().authenticate(from: self)
             } catch {
-                WPAnalytics.track(.wpcomWebSignIn, properties: ["source": "me", "stage": "error", "error": "\(error)"])
                 return
             }
 
-            WPAnalytics.track(.wpcomWebSignIn, properties: ["source": "me", "stage": "success"])
-
             SVProgressHUD.show()
             let credentials = WordPressComCredentials(authToken: token, isJetpackLogin: false, multifactor: false)
             WordPressAuthenticator.shared.delegate!.sync(credentials: .init(wpcom: credentials)) {

WordPressAuthenticator/Sources/Authenticator/WordPressAuthenticator.swift

@@ -165,7 +165,7 @@ import WordPressKit
     ///   - restrictToWPCom: Whether only WordPress.com login is enabled.
     ///   - onLoginButtonTapped: Called when the login button on the prologue screen is tapped.
     /// - Returns: The root view controller for the login flow.
-    public class func loginUI(showCancel: Bool = false, restrictToWPCom: Bool = false, onLoginButtonTapped: (() -> Void)? = nil) -> UIViewController? {
+    public class func loginUI(showCancel: Bool = false, restrictToWPCom: Bool = false, onLoginButtonTapped: (() -> Void)? = nil, continueWithDotCom: ((UIViewController) -> Bool)? = nil) -> UIViewController? {
         let storyboard = Storyboard.login.instance
         guard let controller = storyboard.instantiateInitialViewController() else {
             assertionFailure("Cannot instantiate initial login controller from Login.storyboard")
@@ -174,6 +174,7 @@ import WordPressKit
 
         if let loginNavController = controller as? LoginNavigationController, let loginPrologueViewController = loginNavController.viewControllers.first as? LoginPrologueViewController {
             loginPrologueViewController.showCancel = showCancel
+            loginPrologueViewController.continueWithDotComOverwrite = continueWithDotCom
         }
 
         controller.modalPresentationStyle = .fullScreen

WordPressAuthenticator/Sources/Signin/LoginPrologueViewController.swift

@@ -11,6 +11,7 @@ class LoginPrologueViewController: LoginViewController {
     private var buttonViewController: NUXButtonViewController?
     private var stackedButtonsViewController: NUXStackedButtonsViewController?
     var showCancel = false
+    var continueWithDotComOverwrite: ((UIViewController) -> Bool)? = nil
 
     @IBOutlet private weak var buttonContainerView: UIView!
     /// Blur effect on button container view
@@ -526,6 +527,10 @@ class LoginPrologueViewController: LoginViewController {
     /// Unified "Continue with WordPress.com" prologue button action.
     ///
     private func continueWithDotCom() {
+        if let continueWithDotComOverwrite, continueWithDotComOverwrite(self) {
+            return
+        }
+
         guard let vc = GetStartedViewController.instantiate(from: .getStarted) else {
             WPAuthenticatorLogError("Failed to navigate from LoginPrologueViewController to GetStartedViewController")
             return