Update src/accounts/openid.js

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
actualbudget · Nov 11, 2024 · 8d56358 · 8d56358
1 parent 4362254
commit 8d56358
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/accounts/openid.js b/src/accounts/openid.js
@@ -285,7 +285,8 @@ export function isValidRedirectUrl(url) {
     const redirectUrl = new URL(url);
     const serverUrl = new URL(serverHostname);
 
-    if (redirectUrl.hostname === serverUrl.hostname) {
+    // Compare origin (protocol + hostname + port)
+    if (redirectUrl.origin === serverUrl.origin) {
       return true;
     } else {
       return false;