diff options
Diffstat (limited to 'routes/integration')
| -rw-r--r-- | routes/integration/auth-request.php | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/routes/integration/auth-request.php b/routes/integration/auth-request.php index 21c5d11..ba04988 100644 --- a/routes/integration/auth-request.php +++ b/routes/integration/auth-request.php @@ -23,6 +23,16 @@ function GET(array $config) { return; } + if (isset($_SERVER['HTTP_X_ORIGINAL_URI'])) { + $host = parse_url($_SERVER['HTTP_X_ORIGINAL_URI'], PHP_URL_HOST); + if (in_array( + $host, $config['integration']['no-redirect-domains'] ?? [] + )) { + // ok, don't redirect to login page + return; + } + } + http_response_code(401); $login = 'https://' . $config['site']['primary-domain'] . '/login'; if (isset($_SERVER['HTTP_X_ORIGINAL_URI'])) { |
