Trong Huu Nguyen 80738f2a4b fix(handler/url): use base64 encoding for redirects to preserve query parameters ...

Load balancers or reverse proxies may rewrite or modify the Location
header and unescape its value, which would result in redirects not
preserving the original set of query parameters. This was especially
evident for autologins where we need to redirect to `/oauth2/login` with
the `redirect` parameter containing the original requested URL so that
the end-user ultimately ends up at the latter URL.

We avoid this issue by base64-encoding the original URL, before passing
it along as the intended redirect for the login route.
To preserve existing behaviour, we use a separate query parameter
for the `/oauth2/login`-endpoint that accepts and handles base64-encoded
values.

2022-09-19 11:51:30 +02:00

..

api

style: follow conventions for error variable names

2022-09-19 08:41:23 +02:00

autologin

fix(handler/autologin): ensure path has prefix

2022-09-19 08:41:17 +02:00

error

fix(handler/url): use base64 encoding for redirects to preserve query parameters

2022-09-19 11:51:30 +02:00

reverseproxy

style: follow conventions for error variable names

2022-09-19 08:41:23 +02:00

templates

refactor(handler): split up request handlers into separate modules

2022-09-02 14:53:11 +02:00

url

fix(handler/url): use base64 encoding for redirects to preserve query parameters

2022-09-19 11:51:30 +02:00

handler_standard.go

refactor(openid): clean up client and provider

2022-09-02 18:08:36 +02:00

handler_test.go

fix(handler/url): use base64 encoding for redirects to preserve query parameters

2022-09-19 11:51:30 +02:00

handler.go

refactor(openid): clean up client and provider

2022-09-02 18:08:36 +02:00