[release-4.1] fix: clear authAuthorizeUrl cookie when redirecting to …

…login (#4341) fix: clear authAuthorizeUrl cookie when redirecting to login Signed-off-by: yazhou <[email protected]> Co-authored-by: yazhou <[email protected]>
kubesphere · Nov 13, 2024 · 2a5ada6 · 2a5ada6
1 parent 9daaebf
commit 2a5ada6
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/server/controllers/session.js b/server/controllers/session.js
@@ -191,6 +191,7 @@ const handleLogin = async ctx => {
   }
 
   if (authAuthorizeUrl) {
+    ctx.cookies.set('authAuthorizeUrl', null);
     ctx.body = {
       success: true,
       redirect: authAuthorizeUrl,

diff --git a/server/proxy.js b/server/proxy.js
@@ -141,7 +141,10 @@ const oauthProxy = {
   target,
   changeOrigin: true,
   optionsHandle(options, req, ctx) {
-    ctx.cookies.set('authAuthorizeUrl', req.url);
+    // if not login, redirect to login page
+    if (!ct.cookies.get('token')) {
+      ctx.cookies.set('authAuthorizeUrl', req.url);
+    }
   },
   events: {
     proxyReq(proxyReq, req) {