fix: more strict default callback url handling

nextauthjs · Apr 20, 2022 · afdb3c8 · afdb3c8
1 parent fd755bc
commit afdb3c8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/next-auth/src/core/lib/default-callbacks.ts b/packages/next-auth/src/core/lib/default-callbacks.ts
@@ -5,7 +5,7 @@ export const defaultCallbacks: CallbacksOptions = {
     return true
   },
   redirect({ url, baseUrl }) {
-    if (url.startsWith("/")) return new URL(url, baseUrl).toString()
+    if (url.startsWith("/")) return `${baseUrl}${url}`
     else if (new URL(url).origin === baseUrl) return url
     return baseUrl
   },