fix: clear authAuthorizeUrl cookie when redirecting to login (#4340)

Signed-off-by: yazhou <[email protected]>
kubesphere · Nov 13, 2024 · 3eeabe8 · 3eeabe8
1 parent ccb1016
commit 3eeabe8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/server/controllers/session.js b/server/controllers/session.js
@@ -191,6 +191,7 @@ const handleLogin = async ctx => {
   }
 
   if (authAuthorizeUrl) {
+    ctx.cookies.set('authAuthorizeUrl', null);
     ctx.body = {
       success: true,
       redirect: authAuthorizeUrl,

diff --git a/server/proxy.js b/server/proxy.js
@@ -141,7 +141,10 @@ const oauthProxy = {
   target,
   changeOrigin: true,
   optionsHandle(options, req, ctx) {
-    ctx.cookies.set('authAuthorizeUrl', req.url);
+    // if not login, redirect to login page
+    if (!ct.cookies.get('token')) {
+      ctx.cookies.set('authAuthorizeUrl', req.url);
+    }
   },
   events: {
     proxyReq(proxyReq, req) {