Skip to content

Auth flow#42

Merged
theyoyojo merged 6 commits into
masterfrom
auth_flow
Mar 22, 2024
Merged

Auth flow#42
theyoyojo merged 6 commits into
masterfrom
auth_flow

Conversation

@charliemirabile

Copy link
Copy Markdown
Contributor

allow seamless flow through login when trying to access a restricted resource.

This allows debugging whether sessions work.
the previous syntax wasn't properly redirecting to login.
This helper allows looking up a value provided in
the query string of the url.
specifying target will seemlessly redirect you on once you successfully
authenticate.
In the initial implementation a value of target could be provided that
was a full url on a different host and it would be echoed back out in
the Location header and redirect the user. There isn't a good use-case
for that in the current application, other than potential maliciously
crafted urls that would send a user to our login page and then elsewhere.

@theyoyojo theyoyojo left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm;lgtm;lgtb (looks good to me, let's get this merged, let's get this bread)

@theyoyojo theyoyojo merged commit 2fefa30 into master Mar 22, 2024
@theyoyojo theyoyojo deleted the auth_flow branch March 22, 2024 23:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants