versia-pub/server
2
0
Fork 0
mirror of https://github.com/versia-pub/server.git synced 2026-01-26 04:06:01 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: 🛂 Don't remove iss from current URL

Browse source
This commit is contained in:
Jesse Wierzbinski 2024-06-10 16:11:42 -10:00
parent 5a7b3d0f25
commit 876b0dcde8
No known key found for this signature in database
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
server/api/oauth/sso/:issuer/callback/index.ts
View file

@ -69,11 +69,13 @@ export default (app: Hono) =>
zValidator("param", schemas.param, handleZodError), zValidator("param", schemas.param, handleZodError),
async (context) => { async (context) => {
const currentUrl = new URL(context.req.url); const currentUrl = new URL(context.req.url);
const redirectUrl = new URL(context.req.url);
// Remove state query parameter from URL // Remove state query parameter from URL
currentUrl.searchParams.delete("state"); currentUrl.searchParams.delete("state");
redirectUrl.searchParams.delete("state");
// Remove issuer query parameter from URL (can cause redirect URI mismatches) // Remove issuer query parameter from URL (can cause redirect URI mismatches)
currentUrl.searchParams.delete("iss"); redirectUrl.searchParams.delete("iss");
const { issuer: issuerParam } = context.req.valid("param"); const { issuer: issuerParam } = context.req.valid("param");
const { flow: flowId, user_id, link } = context.req.valid("query"); const { flow: flowId, user_id, link } = context.req.valid("query");
@ -82,7 +84,7 @@ export default (app: Hono) =>
const userInfo = await manager.automaticOidcFlow( const userInfo = await manager.automaticOidcFlow(
flowId, flowId,
currentUrl, currentUrl,
currentUrl, redirectUrl,
(error, message, app) => (error, message, app) =>
returnError( returnError(
{ {