fix: strip redirect URIs for trailing whitespaces (#26006)

This commit is contained in:
Ankush Menat 2024-04-17 18:40:39 +05:30 committed by GitHub
parent e020862b34
commit cab3b963cd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -11,7 +11,7 @@ from oauthlib.openid import RequestValidator
import frappe
from frappe.auth import LoginManager
from frappe.utils.data import get_system_timezone, now_datetime
from frappe.utils.data import cstr, get_system_timezone, now_datetime
class OAuthWebRequestValidator(RequestValidator):
@ -29,8 +29,10 @@ class OAuthWebRequestValidator(RequestValidator):
# Is the client allowed to use the supplied redirect_uri? i.e. has
# the client previously registered this EXACT redirect uri.
redirect_uris = frappe.db.get_value("OAuth Client", client_id, "redirect_uris").split(
get_url_delimiter()
redirect_uris = (
cstr(frappe.db.get_value("OAuth Client", client_id, "redirect_uris"))
.strip()
.split(get_url_delimiter())
)
if redirect_uri in redirect_uris: