1
0
Fork 0
mirror of synced 2024-06-27 02:20:35 +12:00

Require https callback in production, allow for http otherwise

This commit is contained in:
Rory Powell 2021-07-23 15:47:48 +01:00
parent e45a6f6778
commit d7bbae9196

View file

@ -144,7 +144,9 @@ async function oidcStrategyFactory(ctx, configId) {
const chosenConfig = config.configs.filter(c => c.uuid === configId)[0]
const callbackUrl = `${ctx.protocol}://${ctx.host}/api/admin/auth/oidc/callback`
// require https callback in production
const protocol = process.env.NODE_ENV === "production" ? "https" : "http"
const callbackUrl = `${protocol}://${ctx.host}/api/admin/auth/oidc/callback`
return oidc.strategyFactory(chosenConfig, callbackUrl)
}