fix: redirects in some cross-domain scenarios

jsdelivr · Oct 13, 2024 · 9e4ce21 · 9e4ce21
1 parent bfe9c47
commit 9e4ce21
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/oauth/route/authorize.ts b/src/oauth/route/authorize.ts
@@ -8,7 +8,7 @@ type StateObject = { state?: string } | undefined;
 const handle = (options: OAuthRouteOptions) => {
 	return async (ctx: ExtendedContext): Promise<void> => {
 		if (!ctx.state.user || ctx.state.user.authMode !== 'cookie') {
-			return ctx.redirect(`${options.directusHost}/auth/login/github?redirect=${options.serverHost}${encodeURIComponent(ctx.url)}`);
+			return ctx.redirect(`${options.directusHost}/auth/login/github?redirect=${encodeURIComponent(`/redirect?url=${encodeURIComponent(`${options.serverHost}${ctx.url}`)}`)}`);
 		}
 
 		const user = ctx.state.user;