OpenCloud
/
riot-web
mirror of https://github.com/vector-im/riot-web
1
0
Fork 0
Code Issues Releases Wiki Activity

remove auth params from url after login attempt (#25664)

pull/25700/head
Kerry 2023-06-28 11:27:45 +12:00 committed by GitHub
parent 51baaf6667
commit 6bbc2b8238
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/vector/app.tsx
View File

@ -75,13 +75,17 @@ function makeRegistrationUrl(params: QueryDict): string {
function onTokenLoginCompleted(): void { function onTokenLoginCompleted(): void {
// if we did a token login, we're now left with the token, hs and is // if we did a token login, we're now left with the token, hs and is
// url as query params in the url; a little nasty but let's redirect to // url as query params in the url;
// clear them. // if we did an oidc authorization code flow login, we're left with the auth code and state
// as query params in the url;
// a little nasty but let's redirect to clear them.
const url = new URL(window.location.href); const url = new URL(window.location.href);
url.searchParams.delete("loginToken"); url.searchParams.delete("loginToken");
url.searchParams.delete("state");
url.searchParams.delete("code");
logger.log(`Redirecting to ${url.href} to drop loginToken from queryparams`); logger.log(`Redirecting to ${url.href} to drop delegated authentication params from queryparams`);
window.history.replaceState(null, "", url.href); window.history.replaceState(null, "", url.href);
} }