support non-redirecting domains for auth-request

1 files changed, 10 insertions, 0 deletions

diff --git a/routes/integration/auth-request.php b/routes/integration/auth-request.php
index 21c5d11..ba04988 100644
--- a/routes/integration/auth-request.php
+++ b/routes/integration/auth-request.php
@@ -23,6 +23,16 @@ function GET(array $config) {
         return;
     }
 
+    if (isset($_SERVER['HTTP_X_ORIGINAL_URI'])) {
+        $host = parse_url($_SERVER['HTTP_X_ORIGINAL_URI'], PHP_URL_HOST);
+        if (in_array(
+            $host, $config['integration']['no-redirect-domains'] ?? []
+        )) {
+            // ok, don't redirect to login page
+            return;
+        }
+    }
+
     http_response_code(401);
     $login = 'https://' . $config['site']['primary-domain'] . '/login';
     if (isset($_SERVER['HTTP_X_ORIGINAL_URI'])) {