127.0.0.1 instead of localhost not an allowed redirect url

[onionhammer]

Describe the bug

I'm trying to configure my OIDC provider to redirect back to vite running locally, and while localhost works fine, 127.0.0.1 is now advertised in the console as the link to click on.

Why was this changed? According to the history the title of the #8543 it looks like it should show the opposite. It should at least be configurable..

Reproduction

Create a new vite app, run npm run dev, in console it shows "local: http://127.0.0.1..."

System Info

Windows x64

Used Package Manager

npm

Logs

No response

Validations

• Follow our Code of Conduct
• Read the Contributing Guidelines.
• Read the docs.
• Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
• Make sure this is a Vite issue and not a framework-specific issue. For example, if it's a Vue SFC related bug, it should likely be reported to vuejs/core instead.
• Check that this is a concrete bug. For Q&A open a GitHub Discussion or join our Discord Chat Server.
• The provided reproduction is a minimal reproducible example of the bug.

[onionhammer]

Workaround: Run vite with --host argument

[haoqunjiang]

It's explained in the docs.

https://vitejs.dev/config/server-options.html#server-host

The first case is when localhost is used. Node.js under v17 reorders the result of DNS-resolved address by default. When accessing localhost, browsers use DNS to resolve the address and that address might differ from the address which Vite is listening. Vite prints the resolved address when it differs.
You can set dns.setDefaultResultOrder('verbatim') to disable the reordering behavior. Vite will then print the address as localhost.

[haoqunjiang]

I suggest upgrading your Node.js version or manually setting dns.setDefaultResultOrder('verbatim') in the Vite config.
Otherwise, the possibility remains that another server can also listen on localhost:5050 and hijack the connections from Vite.