DigitalTolk / ex / 25067826202 / 1

92%

main: 92%

push

github

feat(auth): support desktop app redirect after OIDC login (#30)

Accept an optional ?redirect_to=<url> query parameter on /auth/oidc/login
that overrides where the browser is sent after a successful OIDC callback.
The value is stored in a short-lived httpOnly cookie and consumed by the
callback handler. Only localhost and tauri:// URLs are accepted to prevent
open-redirect attacks.

This allows the Tauri desktop app to receive the access token back in its
own WebView (http://localhost:5173 in dev, tauri://localhost in production)
rather than being left on the server domain after SSO.

2106 of 2580 branches covered (81.63%)

Branch coverage included in aggregate %.

3020 of 3240 relevant lines covered (93.21%)

69.52 hits per line