django-auth-adfs icon indicating copy to clipboard operation
django-auth-adfs copied to clipboard

Allow additional trusted hosts during callback redirect

Open axieum opened this issue 10 months ago • 12 comments

During development, our Django backend runs at http://localhost:8000/ while the frontend is at http://localhost:5173/.

The following host verification code restricts the redirect to the current request's host.

https://github.com/snok/django-auth-adfs/blob/9415d8a5c885587a1b8b6ed27414da24968336d4/django_auth_adfs/views.py#L54-L59

Could it be possible to merge in Django's ALLOWED_HOSTS setting so we can redirect them back to the original client that may be at a different host?

axieum avatar Nov 29 '24 03:11 axieum