kodev-org
/
vikunja
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(auth): Cleanup getRefreshTokenCookiePath implementation

This commit is contained in:
MidoriKurage 2026-03-31 10:39:36 +08:00 committed by kolaente
parent e8615efe8e
commit fb0d0cb32c
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pkg/modules/auth/auth.go
View File

@ -53,15 +53,17 @@ const RefreshTokenCookieName = "vikunja_refresh_token" //nolint:gosec // not a c
// getRefreshTokenCookiePath returns the cookie path for the refresh token, // getRefreshTokenCookiePath returns the cookie path for the refresh token,
// derived from service.publicurl. // derived from service.publicurl.
func getRefreshTokenCookiePath() string { func getRefreshTokenCookiePath() string {
refreshURL := "/api/v1/user/token/refresh"
publicURL := config.ServicePublicURL.GetString() publicURL := config.ServicePublicURL.GetString()
u, err := url.Parse(publicURL) u, err := url.Parse(publicURL)
if err != nil || publicURL == "" || publicURL == "/" { if err != nil {
return "/api/v1/user/token/refresh" return refreshURL
} }
// Extract the path component and append the refresh endpoint // Extract the path component and append the refresh endpoint
basePath := strings.TrimRight(u.Path, "/") basePath := strings.TrimRight(u.Path, "/")
return basePath + "/api/v1/user/token/refresh" return basePath + refreshURL
} }
// SetRefreshTokenCookie sets an HttpOnly cookie containing the refresh token. // SetRefreshTokenCookie sets an HttpOnly cookie containing the refresh token.