You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would like to report a corner case issue in auth0 library. When an app is served in a subdirectory like /subdir/ the app URL becomes https://<domain>/subdir/. I noticed that in __checkSession() function in plugin.ts the URL is trimmed to '/' using window.history.replaceState(...) which trims the URL to https://<domain>/. After that the router cannot route to the path specified in appState because there's no app on that URL.
I think more flexible URL handling is needed like (e.g., exposing the replaceState behavior as a configurable option).
Reproduction
Setup a sample app that is not served at root but at subdirectory so the starting point of the app should become https://<domain>/<subdir>/
Configure Auth0 authentication using Universal Login and set appState: {target: to.fullPath}
After successful authentication the Auth0 redirects back to the app and the url is trimmed and app never goes to appState path.
Additional context
No response
auth0-vue version
2.3.3
Vue version
3.4.37
Which browsers have you tested in?
Chrome
The text was updated successfully, but these errors were encountered:
IliyanRuskov
changed the title
URL is trimmed to '/' in during handleRedirectCallback()
URL is trimmed to '/' during handleRedirectCallback() invoke
Oct 3, 2024
Checklist
Description
I would like to report a corner case issue in auth0 library. When an app is served in a subdirectory like
/subdir/
the app URL becomeshttps://<domain>/subdir/
. I noticed that in__checkSession()
function in plugin.ts the URL is trimmed to'/'
usingwindow.history.replaceState(...)
which trims the URL tohttps://<domain>/
. After that the router cannot route to the path specified inappState
because there's no app on that URL.I think more flexible URL handling is needed like (e.g., exposing the
replaceState
behavior as a configurable option).Reproduction
https://<domain>/<subdir>/
appState: {target: to.fullPath}
appState
path.Additional context
No response
auth0-vue version
2.3.3
Vue version
3.4.37
Which browsers have you tested in?
Chrome
The text was updated successfully, but these errors were encountered: