1
0
forked from baron/baron-sso

refactor: 보안 정책 준수를 위해 Keto 포트 외부 노출 제거 및 내부 통신으로 변경 #239

This commit is contained in:
2026-02-11 16:25:02 +09:00
parent bb7f3a7b25
commit ab2a5462d4
5 changed files with 20 additions and 34 deletions

View File

@@ -11,8 +11,8 @@ void implSendLoginSuccess(String token) {
effectiveToken = AuthTokenStore.getToken() ?? "";
}
final uri = Uri.parse(html.window.location.href);
final redirectUri = uri.queryParameters['redirect_uri'];
final uri = Uri.base;
final redirectUri = uri.queryParameters['redirect_uri'] ?? uri.queryParameters['redirect_url'];
if (redirectUri != null && redirectUri.isNotEmpty) {
// Redirection flow
@@ -47,5 +47,9 @@ void implSendLoginSuccess(String token) {
}
bool implIsPopup() {
return html.window.opener != null;
if (html.window.opener != null) return true;
// Fallback: Check query parameters for integration source
final uri = Uri.base;
return uri.queryParameters['source'] == 'adminfront';
}