Sirius/tinyauth
1
0
Fork 0
mirror of https://github.com/tinyauthapp/tinyauth.git synced 2026-08-26 07:13:32 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: don't use domain validator in acl matching logic

Browse Source
This commit is contained in:
Stavros
2026-08-22 21:17:08 +03:00
parent 4dc12c677c
commit 61d372b288
4 changed files with 54 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/controller/oauth_controller.go
+3 -1
View File
@@ -294,7 +294,9 @@ func (controller *OAuthController) getCookieDomain() string {
func (controller *OAuthController) isRedirectSafe(redirectURI string) bool {
v := validators.NewDomainValidator(validators.DomainValidatorOptions{
WithPort: true,
WithPort: true,
WithScheme: true,
AllowedSchemes: []string{"https", "http"},
})
_, err := v.SafeHostname(controller.runtime.AppURL)