fix: properly extract redirect URL from OAuth state in keycloak_offline_callback (#13063)

Co-authored-by: openhands <openhands@all-hands.dev>
This commit is contained in:
Tim O'Farrell
2026-02-26 10:23:40 +00:00
committed by GitHub
parent a4cd21e155
commit 0476d57451

View File

@@ -549,7 +549,10 @@ async def keycloak_offline_callback(code: str, state: str, request: Request):
user_id=user_info['sub'], offline_token=keycloak_refresh_token user_id=user_info['sub'], offline_token=keycloak_refresh_token
) )
return RedirectResponse(state if state else request.base_url, status_code=302) redirect_url, _, _ = _extract_oauth_state(state)
return RedirectResponse(
redirect_url if redirect_url else request.base_url, status_code=302
)
@oauth_router.get('/github/callback') @oauth_router.get('/github/callback')