From 96387025da63025894f6259f7eebed0fc6fc53ac Mon Sep 17 00:00:00 2001
From: winter Sparkles
Date: Sun, 9 Aug 2026 15:44:18 +0100
Subject: implement the rest of login process incl. cookie redirects and 'next'

---
 misc.php | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 misc.php

(limited to 'misc.php')

diff --git a/misc.php b/misc.php
new file mode 100644
index 0000000..7965066
--- /dev/null
+++ b/misc.php
@@ -0,0 +1,27 @@
+<?php
+namespace Psso;
+
+function isValidRedirect(string $target, array $config): bool {
+    $redirHost = parse_url($target, PHP_URL_HOST);
+
+    $primary = explode('.', $config['site']['primary-domain'], 2)[1];
+    if (str_ends_with($redirHost, '.' . $primary) || $redirHost == $primary) {
+        return true;
+    }
+
+    foreach ($config['site']['cookie-domains'] ?? [] as $cdomain) {
+        $upper = explode('.', $cdomain, 2)[1];
+        if (str_ends_with($redirHost, '.' . $upper) || $redirHost == $upper) {
+            return true;
+        }
+    }
+
+    foreach ($config['site']['redirect-domains'] ?? [] as $rdomain) {
+        if (str_ends_with($redirHost, '.' . $rdomain) ||
+            $redirHost == $rdomain) {
+            return true;
+        }
+    }
+
+    return false;
+}
-- 
cgit v1.3