cim/zitadel-oidc
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

task: Ease dev host name constraints

Browse source 
This changes the requirements for a issuer hostname to allow anything
that is `http`. The reason for this is because the user of the library
already has to make a conscious decision to set `CAOS_OIDC_DEV` so they
should already understand the risks of not using `https`. The primary
motivation for this change is to allow IdPs to be created in a
containerized integration test environment. Specifically setting up a
docker compose file that starts all parts of the system with a test IdP
using this library where the DNS name will not be `localhost`.
This commit is contained in:
Beardo Moore 2021-08-26 20:32:51 +00:00
parent 84b2ecc60e
commit 581885afb1
No known key found for this signature in database
GPG key ID: FE5D034363019BBC
1 changed files with 1 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

7
pkg/op/config.go
View file

@ -4,7 +4,6 @@ import (
"errors"
"net/url"
"os"
"strings"
"golang.org/x/text/language"
)
@ -57,9 +56,5 @@ func devLocalAllowed(url *url.URL) bool {
if !b {
return b
}
return url.Scheme == "http" &&
url.Host == "localhost" ||
url.Host == "127.0.0.1" ||
url.Host == "::1" ||
strings.HasPrefix(url.Host, "localhost:")
return url.Scheme == "http"
}