Mirroristas/CommunitySolidServer
2
0
Fork 0
mirror of https://github.com/CommunitySolidServer/CommunitySolidServer.git synced 2024-10-03 14:55:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: Trust X-Forwarded headers in the IDP

Browse Source
This commit is contained in:
Joachim Van Herwegen 2021-07-26 13:59:09 +02:00
parent 41694a171d
commit 2df3f1f28c
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/identity/configuration/IdentityProviderFactory.ts
View File

@ -101,7 +101,10 @@ export class IdentityProviderFactory implements ProviderFactory {
// Render errors with our own error handler // Render errors with our own error handler
this.configureErrors(config); this.configureErrors(config);
return new Provider(this.baseUrl, config); // Allow provider to interpret reverse proxy headers
const provider = new Provider(this.baseUrl, config);
provider.proxy = true;
return provider;
} }
/** /**

4
test/unit/identity/configuration/IdentityProviderFactory.test.ts
View File

@ -79,7 +79,9 @@ describe('An IdentityProviderFactory', (): void => {
it('creates a correct configuration.', async(): Promise<void> => { it('creates a correct configuration.', async(): Promise<void> => {
// This is the output of our mock function // This is the output of our mock function
const { issuer, config } = await factory.getProvider() as unknown as { issuer: string; config: Configuration }; const provider = await factory.getProvider() as any;
expect(provider.proxy).toBe(true);
const { issuer, config } = provider as { issuer: string; config: Configuration };
expect(issuer).toBe(baseUrl); expect(issuer).toBe(baseUrl);
// Copies the base config // Copies the base config