fix: correct redirect url if its from cloudfront (#92)

* fix: correct redirect url if from cloudfront * use relative url helper --------- Co-authored-by: Dax Raad <d@ironbay.co>
openauthjs · Dec 26, 2024 · ce44ed6 · ce44ed6
1 parent d8d1580
commit ce44ed6
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/.changeset/rare-mails-flow.md b/.changeset/rare-mails-flow.md
@@ -0,0 +1,5 @@
+---
+"@openauthjs/openauth": patch
+---
+
+fix for password adapter not redirecting to the right place after change password flow
diff --git a/packages/openauth/src/adapter/password.ts b/packages/openauth/src/adapter/password.ts
@@ -213,9 +213,8 @@ export function PasswordAdapter(config: PasswordConfig) {
       })
 
       routes.get("/change", async (c) => {
-        const redirect =
-          c.req.query("redirect_uri") ||
-          c.req.url.replace(/change.*/, "authorize")
+        let redirect =
+          c.req.query("redirect_uri") || getRelativeUrl(c, "./authorize")
         const state: PasswordChangeState = {
           type: "start",
           redirect,
@@ -368,6 +367,7 @@ export function PBKDF2Hasher(opts?: { interations?: number }): PasswordHasher<{
   }
 }
 import { timingSafeEqual, randomBytes, scrypt } from "node:crypto"
+import { getRelativeUrl } from "../util.js"
 
 export function ScryptHasher(opts?: {
   N?: number