projects
/
arvados.git
/ blobdiff
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Merge branch 'main' into 18842-arv-mount-disk-config
[arvados.git]
/
lib
/
controller
/
localdb
/
logout.go
diff --git
a/lib/controller/localdb/logout.go
b/lib/controller/localdb/logout.go
index e1603f14485eb0a4f664a2a00b080a1497c64d2a..04e7681ad7bef728bb11e5c745c2b8391094b2d5 100644
(file)
--- a/
lib/controller/localdb/logout.go
+++ b/
lib/controller/localdb/logout.go
@@
-33,6
+33,8
@@
func logout(ctx context.Context, cluster *arvados.Cluster, opts arvados.LogoutOp
} else {
target = cluster.Services.Workbench1.ExternalURL.String()
}
} else {
target = cluster.Services.Workbench1.ExternalURL.String()
}
+ } else if err := validateLoginRedirectTarget(cluster, target); err != nil {
+ return arvados.LogoutResponse{}, httpserver.ErrorWithStatus(fmt.Errorf("invalid return_to parameter: %s", err), http.StatusBadRequest)
}
return arvados.LogoutResponse{RedirectLocation: target}, nil
}
}
return arvados.LogoutResponse{RedirectLocation: target}, nil
}