Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

redirect uri validation blocking parameters in configuration #623

Open
gianpaolo-tndigit opened this issue Nov 4, 2024 · 0 comments
Open
Assignees

Comments

@gianpaolo-tndigit
Copy link
Collaborator

gianpaolo-tndigit commented Nov 4, 2024

When setting a redirect URI in the configuration, it's possible to include query parameters.
However, during authentication, AAC applies strict validation that blocks these URIs if they contain parameters.
This inconsistency leads to failures when valid URIs with parameters are used.

Error:
param does not match pattern ^[a-zA-Z0-9._:/-]

redirect URI to reproduce the error:

Possible Solution:

  • Update the validation to accept URIs if the base matches, then apply a stricter check to the query parameters for security.
  • inform the user during configuration that the URL will not be accepted because it does not comply with AAC policy.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants