fix: handle response mode query

2023-03-10 13:50:38 +01:00
parent eb579289f0
commit cf958ffa85
1 changed files with 27 additions and 12 deletions
@@ -183,13 +183,26 @@ app.get('/authorize', (req, res) => {
  const codeChallenge = req.query.code_challenge
  const prompt = req.query.prompt
  const responseMode = req.query.response_mode
+  if (responseMode === 'query') {
+    const code = req.cookies['auth0']
+    const session = sessions[code]
+    if (session) {
+      session.nonce = nonce
+      session.state = state
+      session.codeChallenge = codeChallenge
+      sessions[codeChallenge] = session
+      res.redirect(`${redirect}?code=${codeChallenge}&state=${state}`)
+      return
+    }
+  }
  if (prompt === 'none' && responseMode === 'web_message') {
    const code = req.cookies['auth0']
    const session = sessions[code]
-    session.nonce = nonce
-    session.state = state
-    session.codeChallenge = codeChallenge
-    res.send(`
+    if (session) {
+      session.nonce = nonce
+      session.state = state
+      session.codeChallenge = codeChallenge
+      res.send(`
 <!DOCTYPE html>
 <html>
  <body>
@@ -207,13 +220,16 @@ app.get('/authorize', (req, res) => {
  </script>
  </body>
 </html>`)
-  } else {
-    res.cookie('auth0', codeChallenge, {
-      sameSite: 'None',
-      secure: true,
-      httpOnly: true
-    })
-    res.send(`
+      return
+    }
+  }
+
+  res.cookie('auth0', codeChallenge, {
+    sameSite: 'None',
+    secure: true,
+    httpOnly: true
+  })
+  res.send(`
 <html lang='en'>
  <head>
    <meta charset='utf-8'>
@@ -254,7 +270,6 @@ app.get('/authorize', (req, res) => {
  </body>
 </html>
 `)
-  }
 })

 app.get('/userinfo', (req, res) => {