Allow redirection to 3rd party sites
Some checks failed
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled

This commit is contained in:
Dan Milne
2025-10-24 11:52:58 +11:00
parent a21b21ace2
commit 1212e0f22e
2 changed files with 10 additions and 4 deletions

View File

@@ -41,7 +41,7 @@ class SessionsController < ApplicationController
# Sign in successful
start_new_session_for user
redirect_to after_authentication_url, notice: "Signed in successfully."
redirect_to after_authentication_url, notice: "Signed in successfully.", allow_other_host: true
end
def verify_totp
@@ -71,7 +71,7 @@ class SessionsController < ApplicationController
session[:return_to_after_authenticating] = session.delete(:totp_redirect_url)
end
start_new_session_for user
redirect_to after_authentication_url, notice: "Signed in successfully."
redirect_to after_authentication_url, notice: "Signed in successfully.", allow_other_host: true
return
end
@@ -83,7 +83,7 @@ class SessionsController < ApplicationController
session[:return_to_after_authenticating] = session.delete(:totp_redirect_url)
end
start_new_session_for user
redirect_to after_authentication_url, notice: "Signed in successfully using backup code."
redirect_to after_authentication_url, notice: "Signed in successfully using backup code.", allow_other_host: true
return
end