Skip to content

Commit 422e976

Browse files
committed
Do not enforce request and absolute OIDC redirect-path match
1 parent f46a43a commit 422e976

File tree

1 file changed

+2
-5
lines changed

1 file changed

+2
-5
lines changed

extensions/oidc/runtime/src/main/java/io/quarkus/oidc/runtime/CodeAuthenticationMechanism.java

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1438,11 +1438,8 @@ private Uni<AuthorizationCodeTokens> getCodeFlowTokensUni(RoutingContext context
14381438

14391439
// 'redirect_uri': it must match the 'redirect_uri' query parameter which was used during the code request.
14401440
Optional<String> configuredRedirectPath = configContext.oidcConfig().authentication().redirectPath();
1441-
if (configuredRedirectPath.isPresent()) {
1442-
String requestPath = configuredRedirectPath.get().startsWith(HTTP_SCHEME)
1443-
? buildUri(context, configContext.oidcConfig().authentication().forceRedirectHttpsScheme().orElse(false),
1444-
context.request().path())
1445-
: context.request().path();
1441+
if (configuredRedirectPath.isPresent() && !configuredRedirectPath.get().startsWith(HTTP_SCHEME)) {
1442+
String requestPath = context.request().path();
14461443
if (!configuredRedirectPath.get().equals(requestPath)) {
14471444
LOG.warnf("Token redirect path %s does not match the current request path", requestPath);
14481445
return Uni.createFrom().failure(new AuthenticationFailedException("Wrong redirect path"));

0 commit comments

Comments
 (0)