Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: incorrect idToken regex with subdomains #44

Closed
wants to merge 2 commits into from
Closed

fix: incorrect idToken regex with subdomains #44

wants to merge 2 commits into from

Conversation

ckifer
Copy link
Contributor

@ckifer ckifer commented Nov 8, 2022

Issue # (if available):
#43

Description of changes:

  • add failing test case for cookies sent with multiple domains in an order that causes the parent idToken to be returned when expecting the idToken from the subdomain

Proposed Regex solution \.[^.]+\.idToken=([^;]+) fails test here when there are . characters in the username. Need better regex before continuing.

Maybe there is a better way to parse idToken?

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@jeandek jeandek added the bug Something isn't working label Nov 10, 2022
@jeandek jeandek requested a review from borisfba November 10, 2022 16:47
@borisfba
Copy link
Member

Hello Coltin,

Thank you for your contribution.

In future, we plan to URI encode cookies and avoid using Regex to parse it, because we have one more underlying issue with usernames containing illegal characters. Unfortunately, we cannot commit to a timeline for when it would be released.

@ckifer
Copy link
Contributor Author

ckifer commented Dec 5, 2022

Closing since #46 was merged

@ckifer ckifer closed this Dec 5, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants