]> git.openstreetmap.org Git - rails.git/commit
Remove form_action restrictions for sessions#login
authorTom Hughes <tom@compton.nu>
Mon, 17 Jan 2022 11:01:07 +0000 (11:01 +0000)
committerTom Hughes <tom@compton.nu>
Mon, 17 Jan 2022 11:01:07 +0000 (11:01 +0000)
commit988d7cd90df00a8eabbc3cc40e1f3467a0b2dec0
tree3544edf3d823d5d5a20f60d1fdce95a23d05bf30
parentff995e7ea321456036a81cc4a6e9ffad91afd7b0
Remove form_action restrictions for sessions#login

Login may redirect to ouath2_authorizations#create which may then
redirect to arbitrary schemes if the application is already authorized
so we need to allow login to redirect to any scheme.

Fixes #3424
app/controllers/sessions_controller.rb