Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Only allow a known refferer URI for the Account Console #27628

Closed
jonkoops opened this issue Mar 6, 2024 · 0 comments · Fixed by #28743
Closed

Only allow a known refferer URI for the Account Console #27628

jonkoops opened this issue Mar 6, 2024 · 0 comments · Fixed by #28743
Assignees
@jonkoops
Labels
area/account/ui backport/24.0 kind/bug Categorizes a PR related to a bug kind/regression priority/important Must be worked on very soon release/25.0.0 team/ui
Milestone
25.0.0

Comments

@jonkoops
Copy link
Contributor

jonkoops commented Mar 6, 2024 •
edited

It is possible to specify a referrer for the Account Console through a query parameter (referrer_uri) , this will show a link to the user to return to the referrer location:

image

This link should only be shown if the URL is known for the client specified in the referrer parameter.
@jonkoops jonkoops added kind/bug Categorizes a PR related to a bug area/account/ui team/ui labels Mar 6, 2024
@jonkoops jonkoops self-assigned this Mar 6, 2024
@keycloak-github-bot keycloak-github-bot bot added kind/regression priority/blocker Highest Priority. Has a deadline and it blocks other tasks and removed action/priority-regression labels Mar 6, 2024
@keycloak-github-bot keycloak-github-bot bot added this to the 25.0.0 milestone Mar 6, 2024
@jonkoops jonkoops removed this from the 25.0.0 milestone Mar 6, 2024
@jonkoops jonkoops added action/priority-regression and removed priority/blocker Highest Priority. Has a deadline and it blocks other tasks labels Mar 8, 2024
@keycloak-github-bot keycloak-github-bot bot added priority/blocker Highest Priority. Has a deadline and it blocks other tasks and removed action/priority-regression labels Mar 8, 2024
@keycloak-github-bot keycloak-github-bot bot added this to the 25.0.0 milestone Mar 8, 2024
@keycloak-github-bot keycloak-github-bot bot added priority/important Must be worked on very soon and removed priority/blocker Highest Priority. Has a deadline and it blocks other tasks action/priority-important labels Mar 20, 2024
@jonkoops jonkoops removed their assignment Apr 12, 2024
jonkoops added a commit to jonkoops/keycloak that referenced this issue Apr 15, 2024
@jonkoops
Only allow a known refferer URI for the Account Console
f3c2a9a 
Closes keycloak#27628

Signed-off-by: Jon Koops <jonkoops@gmail.com>
@jonkoops jonkoops mentioned this issue Apr 15, 2024
Merged
jonkoops added a commit to jonkoops/keycloak that referenced this issue Apr 16, 2024
@jonkoops
Only allow a known refferer URI for the Account Console
6417765 
Closes keycloak#27628

Signed-off-by: Jon Koops <jonkoops@gmail.com>
jonkoops added a commit that referenced this issue Apr 16, 2024
@jonkoops
Only allow a known refferer URI for the Account Console (#28743)
3216e7c 
Closes #27628

Signed-off-by: Jon Koops <jonkoops@gmail.com>
jonkoops added a commit to jonkoops/keycloak that referenced this issue Apr 16, 2024
@jonkoops
Only allow a known refferer URI for the Account Console (keycloak#28743)
a981bd3 
Closes keycloak#27628

Signed-off-by: Jon Koops <jonkoops@gmail.com>
(cherry picked from commit 3216e7c)
@jonkoops jonkoops mentioned this issue Apr 16, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jonkoops jonkoops

Labels
area/account/ui backport/24.0 kind/bug Categorizes a PR related to a bug kind/regression priority/important Must be worked on very soon release/25.0.0 team/ui
Projects
None yet
Milestone
25.0.0
Development

Successfully merging a pull request may close this issue.

Only allow a known refferer URI for the Account Console jonkoops/keycloak
1 participant
@jonkoops