@orangecheck/auth-client 2.22.1 → 2.23.0

package/dist/index.mjs

@@ -1998,15 +1998,27 @@ var primaryChipStyle = {
   color: V.primary,
   border: `1px solid ${V.primary}`
 };
+function isSameOriginPath(candidate, origin) {
+  try {
+    return new URL(candidate, origin).origin === origin;
+  } catch {
+    return false;
+  }
+}
+function resolutionOrigin() {
+  return typeof window === "undefined" ? "https://ochk.io" : window.location.origin;
+}
 function safeReturnTo(input) {
   const candidate = input ?? "/";
   if (typeof candidate !== "string") return "/";
-  if (!candidate.startsWith("/") || candidate.startsWith("//")) return "/";
-  return candidate;
+  if (!candidate.startsWith("/")) return "/";
+  return isSameOriginPath(candidate, resolutionOrigin()) ? candidate : "/";
 }
 function familyReturnTarget(input) {
   if (typeof input !== "string" || input.length === 0) return void 0;
-  if (input.startsWith("/") && !input.startsWith("//")) return input;
+  if (input.startsWith("/") && isSameOriginPath(input, resolutionOrigin())) {
+    return input;
+  }
   try {
     const u = new URL(input);
     if (u.protocol !== "https:") return void 0;
@@ -3100,6 +3112,6 @@ function handleSudoRequired(body, args = {}) {
   return false;
 }
 
-export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, readTabSession, redirectToSudo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map