Skip to content

Preserve url parameter from POST body; don't append nil referer#67

Open
dmolesUC wants to merge 2 commits intodlindahl:masterfrom
dmolesUC:issue-66-url-param-in-post-body
Open

Preserve url parameter from POST body; don't append nil referer#67
dmolesUC wants to merge 2 commits intodlindahl:masterfrom
dmolesUC:issue-66-url-param-in-post-body

Conversation

@dmolesUC
Copy link

@dmolesUC dmolesUC commented Mar 21, 2022

Previously, we were looking for request.params['url'], and assuming that if it was present, it would be in the original query string and OmniAuth would already have appended it to the callback URL.

With this change, the behavior for a url parameter in the query string (Rack::Request#GET) is unchanged. However, if there is no url parameter in the query string, but there is one in the form body (Rack::Request#POST), we transfer the value from the form body to the callback URL query string.

As a fallback, we use the HTTP Referer value, just as OmniAuth does for the origin parameter. However, we were previously appending it unconditionally, whether or not it was actually present (as it often isn’t, for various reasons), resulting in an empty url query parameter in the callback URL. With this change, we now only append the referrer if non-nil.

Fixes #66.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

return_url ignores url parameter from POST request

1 participant