fix(authentication-oauth): Allow hash based redirects (feathersjs#1676)

yusernetwork · Nov 11, 2019 · a50788e · a50788e
1 parent 6b2e3e3
commit a50788e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/src/strategy.ts b/src/strategy.ts
@@ -79,7 +79,8 @@ export class OAuthStrategy extends AuthenticationBaseStrategy {
       return null;
     }
 
-    const separator = redirect.endsWith('?') ? '' : '#';
+    const separator = redirect.endsWith('?') ? '' :
+      (redirect.indexOf('#') !== -1 ? '?' : '#');
     const authResult: AuthenticationResult = data;
     const query = authResult.accessToken ? {
       access_token: authResult.accessToken

diff --git a/test/strategy.test.ts b/test/strategy.test.ts
@@ -39,6 +39,11 @@ describe('@feathersjs/authentication-oauth/strategy', () => {
 
     redirect = await strategy.getRedirect({ accessToken: 'testing' });
     assert.equal(redirect, null);
+
+    app.get('authentication').oauth.redirect = '/#dashboard';
+
+    redirect = await strategy.getRedirect({ accessToken: 'testing' });
+    assert.equal(redirect, '/#dashboard?access_token=testing');
   });
 
   it('getProfile', async () => {