multi-domain login redirects (#5564)

Add a new 'depends_on' route configuration option taking a list of 
additional hosts to redirect through on login. Update the authorize 
service and proxy service to support a chain of /.pomerium/callback
redirects. Add an integration test for this feature.
This commit is contained in:
Kenneth Jenkins 2025-04-04 13:14:30 -07:00 committed by GitHub
parent c47055bece
commit c848c225e8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
12 changed files with 227 additions and 16 deletions

View file

@ -235,8 +235,12 @@ func (a *Authorize) requireLoginResponse(
signInURLQuery = url.Values{}
signInURLQuery.Add("pomerium_traceparent", id)
}
var additionalHosts []string
if request.Policy != nil {
additionalHosts = request.Policy.DependsOn
}
redirectTo, err := state.authenticateFlow.AuthenticateSignInURL(
ctx, signInURLQuery, &checkRequestURL, idp.GetId())
ctx, signInURLQuery, &checkRequestURL, idp.GetId(), additionalHosts)
if err != nil {
return nil, err
}