fix(web): removing token from url bar for security purposes

hastearcade · Oct 27, 2021 · 73c3dd1 · 73c3dd1
1 parent e6655db
commit 73c3dd1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/packages/web/src/api/hasteClient.ts b/packages/web/src/api/hasteClient.ts
@@ -97,6 +97,9 @@ export class HasteClient {
         }
       } else if (idToken) {
         this.ls.set('haste:config', idToken);
+        urlSearchParams.delete('id_token');
+        const plainUrl = window.location.href.split('?')[0];
+        window.history.pushState({}, document.title, `${plainUrl}${urlSearchParams.toString()}`);
         return {
           token: idToken,
           isAuthenticated: true,