3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-08-06 10:21:05 +02:00
Code Issues Projects Releases Packages Wiki Activity

webauthn: use absolute URL for delete redirect (#2935)

Browse source 
* authenticate: add callback endpoint

* webauthn: use absolute URL for delete redirect
This commit is contained in:
Caleb Doxsey 2022-01-14 10:23:27 -07:00 • committed by GitHub
parent b019b61ccb
commit 8d882ce9c9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
authenticate/handlers/webauthn/webauthn.go
View file

@ -12,6 +12,7 @@ import (
"io" "io"
"net" "net"
"net/http" "net/http"
"net/url"
"github.com/google/uuid" "github.com/google/uuid"
"github.com/pomerium/csrf" "github.com/pomerium/csrf"
@ -340,7 +341,9 @@ func (h *Handler) handleUnregister(w http.ResponseWriter, r *http.Request, state
// remove the credential from the session // remove the credential from the session
state.Session.DeviceCredentials = removeSessionDeviceCredential(state.Session.DeviceCredentials, deviceCredentialID) state.Session.DeviceCredentials = removeSessionDeviceCredential(state.Session.DeviceCredentials, deviceCredentialID)
return h.saveSessionAndRedirect(w, r, state, "/.pomerium") return h.saveSessionAndRedirect(w, r, state, urlutil.GetAbsoluteURL(r).ResolveReference(&url.URL{
Path: "/.pomerium",
}).String())
} }
func (h *Handler) handleView(w http.ResponseWriter, r *http.Request, state *State) error { func (h *Handler) handleView(w http.ResponseWriter, r *http.Request, state *State) error {