dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix Ajax responses when rejected (current system broken by CORS)

Browse Source
This commit is contained in:
Xavier Guimard 2020-04-08 11:38:00 +02:00
parent 557fa3f74c
commit f4976d85fa
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/PSGI.pm
View File

@ -144,6 +144,18 @@ sub _authAndTrace {
}
}
elsif ( $res < 400 ) {
if ( $req->wantJSON ) {
my %h = ( $req->spliceHdrs );
my $host = $req->env->{HTTP_HOST};
if ( $h{Location}
and $h{Location} =~ m#^\Q$self->{portal}\E#
and $h{Location} !~ m#^https?://$host# )
{
return [
401, [ 'WWW-Authenticate' => 'SSO ' . $self->{portal} ], []
];
}
}
return [ $res, [ $req->spliceHdrs ], [] ];
}
else {