zotan/AutheliaMultiDomainProxy
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Simplify host restriction

Browse source
This commit is contained in:
Laura Hausmann 2023-04-05 20:17:44 +02:00
parent c0292e080d
commit 102bd6bf30
Signed by: zotan
GPG key ID: D044E84C5BE01605
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Controllers/RedirectController.cs
View file

@ -9,10 +9,8 @@ namespace AutheliaMultiDomainProxy.Controllers;
public class RedirectController : Controller {
public IActionResult Get([FromQuery] string tgt) {
// Check if we are on an allowed domain
if (!Vars.PermittedDomains.Any(p => Request.Host.Host.EndsWith($".{p}"))) {
Response.StatusCode = 421;
if (Vars.PermittedDomains.All(p => Request.Host.Host != $"{Vars.AuthProxySubdomain}.{p}"))
return StatusCode(StatusCodes.Status421MisdirectedRequest);
}
var dstDomain = AuthHelpers.GetRootDomain(tgt);