From 0ff894a909b50b42fa9faa435ce8b9a8b595d80e Mon Sep 17 00:00:00 2001 From: Amanda McCann Date: Fri, 15 May 2026 10:51:47 +0200 Subject: [PATCH] Add ::1 (IPv6 local) to allowed http redirect_uris for OAuth Allows one to do local testing and to use IPv6. Previously only IPv4 was supported (127.0.0.1), but not ::1. Related discussions: https://github.com/openstreetmap/openstreetmap-website/pull/4287 https://github.com/openstreetmap/openstreetmap-website/issues/3613 --- config/initializers/doorkeeper.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/initializers/doorkeeper.rb b/config/initializers/doorkeeper.rb index a2df9167f..092285382 100644 --- a/config/initializers/doorkeeper.rb +++ b/config/initializers/doorkeeper.rb @@ -267,7 +267,7 @@ Doorkeeper.configure do # redirects to localhost for example). force_ssl_in_redirect_uri do |uri| - !Rails.env.development? && uri.host != "127.0.0.1" + !Rails.env.development? && ["127.0.0.1", "::1"].exclude?(uri.host) end # Specify what redirect URI's you want to block during Application creation. -- 2.47.3