@absolutejs/auth 0.59.2 → 0.59.3

package/README.md

@@ -29,8 +29,8 @@ Absolute Auth is a TypeScript-based authentication system that provides a compre
 1. Clone the repository:
 
     ```bash
-    git clone https://github.com/alexkahndev/absolute-auth.git
-    cd absolute-auth
+    git clone https://github.com/absolutejs/auth.git
+    cd auth
     ```
 
 2. Install the dependencies:

package/dist/index.js

@@ -10275,6 +10275,12 @@ var resolveProviderClientConfiguration = ({
 // src/routes/authorize.ts
 init_constants();
 import { Elysia as Elysia27, t as t20 } from "elysia";
+
+// src/redirect.ts
+var isSafeLocalPath = (value) => /^\/(?![/\\])/.test(value);
+var toSafeLocalPath = (value, fallback = "/") => value !== undefined && isSafeLocalPath(value) ? value : fallback;
+
+// src/routes/authorize.ts
 var parseReferer = (headerReferer) => {
   if (!headerReferer)
     return "/";
@@ -10282,10 +10288,7 @@ var parseReferer = (headerReferer) => {
     const url = new URL(headerReferer);
     return url.pathname + url.search;
   } catch {
-    if (headerReferer.startsWith("/") && !headerReferer.startsWith("//")) {
-      return headerReferer;
-    }
-    return "/";
+    return toSafeLocalPath(headerReferer);
   }
 };
 var authorize = ({
@@ -11962,7 +11965,7 @@ var parseReferer2 = (referer) => {
     const url = new URL(referer);
     return url.pathname + url.search;
   } catch {
-    return referer.startsWith("/") && !referer.startsWith("//") ? referer : "/";
+    return toSafeLocalPath(referer);
   }
 };
 var oidcSsoRoutes = ({
@@ -12105,18 +12108,13 @@ var oidcSsoRoutes = ({
 
 // src/sso/samlRoutes.ts
 import { Elysia as Elysia39, t as t31 } from "elysia";
-var toLocalPath = (value) => {
-  if (value === undefined || value.length === 0)
-    return "/";
-  return value.startsWith("/") && !value.startsWith("//") ? value : "/";
-};
 var refererPath = (referer) => {
   if (referer === undefined)
     return "/";
   try {
-    return toLocalPath(new URL(referer).pathname);
+    return toSafeLocalPath(new URL(referer).pathname);
   } catch {
-    return toLocalPath(referer);
+    return toSafeLocalPath(referer);
   }
 };
 var settle = async (work) => {
@@ -12219,7 +12217,7 @@ var samlSsoRoutes = ({
         user,
         userSessionId
       });
-      return redirect(toLocalPath(body.RelayState));
+      return redirect(toSafeLocalPath(body.RelayState));
     } catch (error) {
       await onSsoCallbackError?.({ error, organizationId });
       return status("Internal Server Error", "SAML sign-in failed");
@@ -12310,7 +12308,7 @@ var samlSsoRoutes = ({
         sloUrl
       }) ?? Promise.resolve());
       if (!("error" in responseSettled)) {
-        return redirect(toLocalPath(RelayState));
+        return redirect(toSafeLocalPath(RelayState));
       }
       await onSsoCallbackError?.({
         error: responseSettled.error,
@@ -12358,7 +12356,7 @@ var samlSsoRoutes = ({
       });
       return redirect(url);
     }
-    return redirect(toLocalPath(info.relayState ?? RelayState));
+    return redirect(toSafeLocalPath(info.relayState ?? RelayState));
   }, {
     cookie: t31.Cookie({
       user_session_id: t31.Optional(userSessionIdTypebox)
@@ -38040,5 +38038,5 @@ export {
   AGENT_CLAIM_GRANT_TYPE
 };
 
-//# debugId=FC3F27A521162E4064756E2164756E21
+//# debugId=77BC0B5B04897A6364756E2164756E21
 //# sourceMappingURL=index.js.map