auth.provider API
    Preparing search index...

    Interface RedirectConfig

    Shared config shape for federation providers that support redirect validation and callback redirect resolution.

    interface RedirectConfig {
        authCallbackUrl?: string;
        clientUrl?: string;
        redirectAllowlist?: readonly string[];
        sessionDomain?: string;
    }
    Index
    authCallbackUrl? clientUrl? redirectAllowlist? sessionDomain?
    authCallbackUrl?: string
    clientUrl?: string
    redirectAllowlist?: readonly string[]

    The exact redirect targets a consumer-supplied redirect_to may name.

    Read by createFederationRedirectPolicy (redirect-policy.mts), which owns the matching rules and the fail-closed behaviour when this is absent or empty. validateRedirect used to live here and derived its answer from sessionDomain alone, which meant an unset sessionDomain accepted every http(s) URL on earth (#278); it was removed rather than tightened so no caller can reach the permissive shape.

    sessionDomain?: string

    Settings
    Member Visibility

    On This Page
    Properties