woodwind
woodwind copied to clipboard
Relative URLs in authorization_endpoint aren't correctly resolved
On my site, 00dani.me, I've declared my authorisation endpoint like so:
<link rel="authorization_endpoint" href="/auth/indie" />
The correct behaviour when attempting to log in to Woodwind as 00dani.me would be, therefore, to redirect to https://00dani.me/auth/indie with appropriate parameters. Woodwind, however, incorrectly redirects to https://woodwind.xyz/auth/indie instead - presumably it just tries to redirect to /auth/indie, and defaults to the same domain.
Other IndieAuth clients, like https://indieauth.com and https://telegraph.p3k.io, correctly resolve my authorisation endpoint. Woodwind should do the same.