HoovesSocial/hippofish
2
0
Fork 0
Code Issues 3 Pull requests 1 Projects Releases Packages Wiki Activity Actions

fix: multiple redirect uri support

Browse source
This commit is contained in:
Eana Hufwe 2024-05-24 16:19:36 +00:00 committed by naskya
parent 6db8ad14e2
commit 440d961ab4
No known key found for this signature in database
GPG key ID: 712D413B3A9FED5C
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
packages/backend/src/server/api/mastodon/helpers/auth.ts
View file

@ -17,7 +17,8 @@ export class AuthHelpers {
const scopes = (typeof body.scopes === "string"
? body.scopes.split(" ")
: body.scopes) ?? ["read"];
const redirect_uris = body.redirect_uris?.split("\n") as
// Mastodon takes any whitespace chars or line breaks as separator
const redirect_uris = body.redirect_uris?.split(/[\s\n]/) as
| string[]
| undefined;
const client_name = body.client_name;
@ -94,7 +95,9 @@ export class AuthHelpers {
400,
"Cannot request more scopes than application",
);
if (!app.callbackUrl?.startsWith(body.redirect_uri))
const callbackUrls = app.callbackUrl?.split("\n") ?? [];
if (!callbackUrls.some(url => url.startsWith(body.redirect_uri)))
throw new MastoApiError(400, "Redirect URI not in list");
const secret = generateSecureRandomString(32);
const token = await AccessTokens.insert({