DigitalTolk / ex / 25068004308

89%

main: 92%

Build Type

push

github

Committed by web-flow

Commit Message

feat(auth): support desktop app redirect after OIDC login (#30)

Accept an optional ?redirect_to=<url> query parameter on /auth/oidc/login
that overrides where the browser is sent after a successful OIDC callback.
The value is stored in a short-lived httpOnly cookie and consumed by the
callback handler. Only localhost and tauri:// URLs are accepted to prevent
open-redirect attacks.

This allows the Tauri desktop app to receive the access token back in its
own WebView (http://localhost:5173 in dev, tauri://localhost in production)
rather than being left on the server domain after SSO.

Coverage Stats

2106 of 2580 branches covered (81.63%)

Branch coverage included in aggregate %.

0 of 32 new or added lines in 1 file covered. (0.0%)

2 existing lines in 1 file now uncovered.

9203 of 10149 relevant lines covered (90.68%)

27.95 hits per line