fix: middleware traefik redirect url (#1040)

This commit is contained in:
phoval 2025-08-28 13:24:29 +02:00 committed by GitHub
parent c661bc37d1
commit 9ddc1eb840
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
28 changed files with 84 additions and 37 deletions

View file

@ -435,6 +435,7 @@ func (s *Server) PassChallenge(w http.ResponseWriter, r *http.Request) {
return
}
if (len(urlParsed.Host) > 0 && len(s.opts.RedirectDomains) != 0 && !slices.Contains(s.opts.RedirectDomains, urlParsed.Host)) || urlParsed.Host != r.URL.Host {
lg.Debug("domain not allowed", "domain", urlParsed.Host)
s.respondWithError(w, r, localizer.T("redirect_domain_not_allowed"))
return
}