barbercollie/tinyauth
1
0
Fork 1
mirror of https://github.com/steveiliop56/tinyauth.git synced 2026-07-19 08:21:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: allow for mismatching protocol in trusted domain check - ui warnings

Browse Source
This commit is contained in:
Stavros
2026-07-18 18:06:26 +03:00
parent 6efb970673
commit d6087dc45e
2 changed files with 1 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/lib/hooks/redirect-uri.ts
-4
View File
@@ -114,10 +114,6 @@ export const isTrustedDomain = (
return false; return false;
} }
if (url.protocol != appUrl.protocol) {
return false;
}
if (getEffectivePort(url) != getEffectivePort(appUrl)) { if (getEffectivePort(url) != getEffectivePort(appUrl)) {
return false; return false;
} }
internal/controller/oauth_controller.go
+1 -3
View File
@@ -313,8 +313,7 @@ func (controller *OAuthController) getCookieDomain() string {
func (controller *OAuthController) isRedirectSafe(redirectURI string) bool { func (controller *OAuthController) isRedirectSafe(redirectURI string) bool {
v := validators.NewDomainValidator(validators.DomainValidatorOptions{ v := validators.NewDomainValidator(validators.DomainValidatorOptions{
WithScheme: true, WithPort: true,
WithPort: true,
}) })
_, err := v.SafeHostname(controller.runtime.AppURL) _, err := v.SafeHostname(controller.runtime.AppURL)
@@ -333,7 +332,6 @@ func (controller *OAuthController) isRedirectSafe(redirectURI string) bool {
controller.log.App.Debug().Err(err).Msg("Failed to validate redirect URI") controller.log.App.Debug().Err(err).Msg("Failed to validate redirect URI")
if errors.Is(err, validators.ErrInvalidURL) || if errors.Is(err, validators.ErrInvalidURL) ||
errors.Is(err, validators.ErrSchemeMismatch) ||
errors.Is(err, validators.ErrPortMismatch) { errors.Is(err, validators.ErrPortMismatch) {
return false return false
} }