public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[release-11.5.4] [IAM] Prepend AppSubURL to redirectURI before validating it (#103771)

Browse Source 
[IAM] Prepend AppSubURL to redirectURI before validating it (#103475)

(cherry picked from commit 5053aa576d)
This commit is contained in:
xavi
2025-04-11 14:00:33 +02:00
committed by GitHub
parent 9d02fa97b1
commit 684fbc089e
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/api/user_token.go
+2 -2
View File
@@ -89,11 +89,11 @@ func (hs *HTTPServer) RotateUserAuthTokenRedirect(c *contextmodel.ReqContext) re
return response.Redirect(hs.GetRedirectURL(c))
}
redirectTo := c.Query("redirectTo")
redirectTo := hs.Cfg.AppSubURL + c.Query("redirectTo")
if err := hs.ValidateRedirectTo(redirectTo); err != nil {
return response.Redirect(hs.Cfg.AppSubURL + "/")
}
return response.Redirect(hs.Cfg.AppSubURL + redirectTo)
return response.Redirect(redirectTo)
}
// swagger:route POST /user/auth-tokens/rotate