misty.cafe/minty
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Verify SSO window message origin (#2686)

Browse source
This commit is contained in:
Ajay Bura 2026-02-23 12:38:25 +05:30 • committed by GitHub
parent b2cb717178
commit ed0ad61bc4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/app/components/uia-stages/SSOStage.tsx
View file

@ -26,7 +26,12 @@ export function SSOStage({
useEffect(() => {
const handleMessage = (evt: MessageEvent) => {
if (ssoWindow && evt.data === 'authDone' && evt.source === ssoWindow) {
if (
evt.origin === new URL(ssoRedirectURL).origin &&
ssoWindow &&
evt.data === 'authDone' &&
evt.source === ssoWindow
) {
ssoWindow.close();
setSSOWindow(undefined);
handleSubmit();
@ -37,7 +42,7 @@ export function SSOStage({
return () => {
window.removeEventListener('message', handleMessage);
};
}, [ssoWindow, handleSubmit]);
}, [ssoWindow, handleSubmit, ssoRedirectURL]);
return (
<Dialog>