Whitelist /oidc/login endpoint, fixes #21

This commit is contained in:
yu-i-i
2025-02-22 03:26:25 +01:00
parent b7a07d2725
commit f4dae8b41c

View File

@@ -1,5 +1,6 @@
import logger from '@overleaf/logger'
import UserController from '../../../../../app/src/Features/User/UserController.js'
import AuthenticationController from '../../../../../app/src/Features/Authentication/AuthenticationController.js'
import OIDCAuthenticationController from './OIDCAuthenticationController.mjs'
import logout from '../../../logout.mjs'
@@ -7,7 +8,9 @@ export default {
apply(webRouter) {
logger.debug({}, 'Init OIDC router')
webRouter.get('/oidc/login', OIDCAuthenticationController.passportLogin)
AuthenticationController.addEndpointToLoginWhitelist('/oidc/login')
webRouter.get('/oidc/login/callback', OIDCAuthenticationController.passportLoginCallback)
AuthenticationController.addEndpointToLoginWhitelist('/oidc/login/callback')
webRouter.get('/oidc/logout/callback', OIDCAuthenticationController.passportLogoutCallback)
webRouter.post('/user/oauth-unlink', OIDCAuthenticationController.unlinkAccount)
webRouter.post('/logout', logout, UserController.logout)