fix(ui): catch invalid callback URLs on login page redirect to dashboard

Open-Earth-Foundation · Apr 4, 2024 · 5be4a66 · 5be4a66
1 parent cd083b6
commit 5be4a66
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/app/src/app/[lng]/auth/login/page.tsx b/app/src/app/[lng]/auth/login/page.tsx
@@ -53,8 +53,16 @@ export default function Login({
   const searchParams = useSearchParams();
 
   const [error, setError] = useState("");
-  const defaultUrl = `https://${document.location.host}/${lng}`;
-  const callbackUrl = searchParams.get("callbackUrl") || defaultUrl;
+  const defaultUrl = `/${lng}`;
+  const callbackParam = searchParams.get("callbackUrl");
+  let callbackUrl = defaultUrl;
+  if (
+    callbackParam &&
+    callbackParam !== "null" &&
+    callbackParam !== "undefined"
+  ) {
+    callbackUrl = callbackParam;
+  }
   const onSubmit: SubmitHandler<Inputs> = async (data) => {
     try {
       const res = await signIn("credentials", {