bb-plane-fork/apps/api/plane/authentication
Nikhil 3d06189723
[WEB-4943] refactor: enhance URL validation and redirection logic in authentication views (#7815)
* refactor: enhance URL validation and redirection logic in authentication views

* Updated authentication views (SignInAuthSpaceEndpoint, GitHubCallbackSpaceEndpoint, GitLabCallbackSpaceEndpoint, GoogleCallbackSpaceEndpoint, and MagicSignInSpaceEndpoint) to include url_has_allowed_host_and_scheme checks for safer redirection.
* Improved URL construction by ensuring proper formatting and fallback to base host when necessary.
* Added get_allowed_hosts function to path_validator.py for better host validation.

* refactor: improve comments and clean up code in path_validator.py

* Updated comments for clarity in the get_safe_redirect_url function.
* Removed unnecessary blank line to enhance
2025-09-17 16:13:32 +05:30
..
adapter chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30
middleware chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30
provider [WEB-4045] feat: restructuring of the external APIs for better maintainability (#7477) 2025-07-25 00:17:05 +05:30
utils chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30
views [WEB-4943] refactor: enhance URL validation and redirection logic in authentication views (#7815) 2025-09-17 16:13:32 +05:30
__init__.py chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30
apps.py chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30
rate_limit.py chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30
session.py chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30
urls.py chore: rename server to api (#7342) 2025-07-04 15:32:21 +05:30