Merge pull request #1 from vasanth3008/vasanth3008-saml

Use RelayState for login redirect fallback
1 week ago · 7ce06dceba
parent d14b0a5509 1455324ac2
commit 7ce06dceba
1 changed files with 1 additions and 1 deletions
--- a/server/controllers/auth.js
+++ b/server/controllers/auth.js
@ -72,7 +72,7 @@ router.all('/login/:strategy/callback', async (req, res, next) => {
    }, { req, res })
    res.cookie('jwt', authResult.jwt, commonHelper.getCookieOpts())

-    const loginRedirect = req.cookies['loginRedirect']
+    const loginRedirect = req.cookies['loginRedirect'] ?? decodeURI(req.body.RelayState)
    const isValidRedirect = loginRedirect && loginRedirect.startsWith('/') && !loginRedirect.startsWith('//') && !loginRedirect.includes('://')
    if (loginRedirect === '/' && authResult.redirect) {
      res.clearCookie('loginRedirect')