safebox/guacamole-client
4
0
Fork 0
mirror of https://github.com/gyurix1968/guacamole-client.git synced 2025-09-06 05:07:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

GUACAMOLE-805: Only reformat a URL fragment that appears to be from OpenID Connect if the fragment is not already in a format consumable by AngularJS ("#?..." or "#/?...").

Browse Source
This commit is contained in:
Michael Jumper
2019-06-02 16:43:48 -07:00
parent 21f1ee6ac3
commit fe7ef19851
1 changed files with 7 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
extensions/guacamole-auth-openid/src/main/resources/transformToken.js
View File

@@ -18,19 +18,17 @@
*/
/**
* Before AngularJS routing takes effect, test whether the URL fragment
* contains an OpenID Connect "id_token" parameter, and reformat the fragment
* such that the client side of Guacamole's authentication system will
* automatically forward the "id_token" value for server-side validation.
* Before AngularJS routing takes effect, reformat the URL fragment
* from the format used by OpenID Connect ("#param1=value1&param2=value2&...")
* to the format used by AngularJS ("#/?param1=value1&param2=value2&...") such
* that the client side of Guacamole's authentication system will automatically
* forward the "id_token" value for server-side validation.
*
* Note that not all OpenID identity providers will include the "id_token"
* parameter in the first position; it may occur after several other parameters
* within the hash.
* within the fragment.
*/
(function guacOpenIDTransformToken() {
// Transform "/#id_token=..." to "/#/?id_token=..."
if (/(^#|&)id_token=/.test(location.hash))
if (/^#(?![?\/])(.*&)?id_token=/.test(location.hash))
location.hash = '/?' + location.hash.substring(1);
})();