Fix after-sign-in redirect issues #243

2026-08-10T17:29:03Z

raucao commented

2026-08-10 17:29:03 +00:00

Properly clear redirect URI once used (so it's not persisted across sign-in requests)
RS OAuth: fail with 400 status before storing invalid redirect URI as after-sign-in URL
Always redirect to the root URL after password resets

fixes #235

* Properly clear redirect URI once used (so it's not persisted across sign-in requests) * RS OAuth: fail with 400 status before storing invalid redirect URI as after-sign-in URL * Always redirect to the root URL after password resets fixes #235

raucao added the kredits-2 bug labels 2026-08-10 17:29:03 +00:00

raucao added 3 commits 2026-08-10 17:29:03 +00:00

Validate rs/oauth redirect_uri before storing return URL a62d84e20a

Consume user_return_to on sign-in 29a9dee1cb

Redirect to root after password reset

CI / Test (pull_request) Successful in 32s

Details

Release Drafter / Update release notes draft (pull_request) Successful in 2s

Details

89184cd851

raucao requested review from greg 2026-08-10 17:29:03 +00:00

raucao added this to the 1.0.0 Release milestone 2026-08-10 17:30:22 +00:00

raucao removed this from the 1.0.0 Release milestone 2026-08-10 17:30:30 +00:00

greg approved these changes

2026-08-10 17:43:20 +00:00

greg left a comment

LGTM 👍

greg merged commit 3517303d37 into master

2026-08-10 17:43:39 +00:00

greg deleted branch bugfix/after-signin_redirects

2026-08-10 17:43:40 +00:00

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/akkounts#243