fix: use case insensitive check in the oauth controller

2026-06-22 19:30:15 +00:00 · 2026-06-21 16:53:31 +03:00
parent 21877190e4
commit d87be8676c
1 changed files with 2 additions and 2 deletions
@@ -335,7 +335,7 @@ func (controller *OAuthController) isRedirectSafe(redirectURI string) bool {
 		return false
 	}

-	if u.Host == au.Host {
+	if strings.EqualFold(u.Host, au.Host) {
 		return true
 	}

@@ -343,7 +343,7 @@ func (controller *OAuthController) isRedirectSafe(redirectURI string) bool {
 		return false
 	}

-	if strings.HasSuffix(u.Host, "."+au.Host) {
+	if strings.HasSuffix(strings.ToLower(u.Host), "."+strings.ToLower(controller.runtime.CookieDomain)) {
 		return true
 	}