use absolute redirect URLs

ccims · Aug 6, 2024 · c14cd34 · c14cd34
1 parent 393375a
commit c14cd34
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/backend/src/api-internal/auth-error-redirect.middleware.ts b/backend/src/api-internal/auth-error-redirect.middleware.ts
@@ -38,9 +38,8 @@ export class AuthErrorRedirectMiddleware extends StateMiddleware<OAuthAuthorizeS
                 ? "register-additional"
                 : "login";
             const encodedState = encodeURIComponent(this.stateJwtService.sign({ request: state.request }));
-            res.redirect(
-                `/auth/flow/${target}?error=${encodeURIComponent(error.authErrorMessage)}&strategy_instance=${encodeURIComponent(error.strategyInstanceId)}&state=${encodedState}`,
-            );
+            const url = `/auth/flow/${target}?error=${encodeURIComponent(error.authErrorMessage)}&strategy_instance=${encodeURIComponent(error.strategyInstanceId)}&state=${encodedState}`;
+            res.redirect(new URL(url, process.env.GROPIUS_ENDPOINT).toString());
         } else {
             next();
         }

diff --git a/backend/src/api-internal/auth-redirect.middleware.ts b/backend/src/api-internal/auth-redirect.middleware.ts
@@ -166,7 +166,7 @@ export class AuthRedirectMiddleware extends StateMiddleware<
                     suggestions.displayName ?? "",
                 )}&forceSuggestedUsername=${state.strategy.forceSuggestedUsername}`;
                 const url = `/auth/flow/register?code=${token}&state=${encodedState}` + suggestionQuery;
-                res.redirect(url);
+                res.redirect(new URL(url, process.env.GROPIUS_ENDPOINT).toString());
             } else {
                 await this.redirectWithCode(state, res);
             }

diff --git a/backend/src/api-oauth/oauth-authorize-redirect.middleware.ts b/backend/src/api-oauth/oauth-authorize-redirect.middleware.ts
@@ -27,6 +27,7 @@ export class OAuthAuthorizeRedirectMiddleware extends StateMiddleware<
             ? "register-additional"
             : "login";
         const encodedState = encodeURIComponent(this.stateJwtService.sign({ request: state.request }));
-        res.redirect(`/auth/flow/${target}?state=${encodedState}`);
+        const url = `/auth/flow/${target}?state=${encodedState}`;
+        res.redirect(new URL(url, process.env.GROPIUS_ENDPOINT).toString());
     }
 }