cernont
654b297e2e
- Connexion API via proxy Angular (résolution CORS, base path /api) - Import CSS ng-zorro global pour les modales et composants - Filtres Camion/Show câblés sur l'affichage de la grille - Camions affichés via TrucksService (linkés au show du même créneau) - Panneau de détails : spectacles + camions du jour sélectionné - Modale de création de spectacle stylisée avec fond et centrage - Positionnement précis des events à la minute dans leur créneau - Auto-scroll vers l'heure courante au chargement - Ligne "maintenant" sur la colonne du jour actuel - Régénération des services OpenAPI (nouveaux noms de types) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
44 lines
2.2 KiB
JavaScript
44 lines
2.2 KiB
JavaScript
/**
|
|
* Utilities for handling OAuth resource URIs.
|
|
*/
|
|
/**
|
|
* Converts a server URL to a resource URL by removing the fragment.
|
|
* RFC 8707 section 2 states that resource URIs "MUST NOT include a fragment component".
|
|
* Keeps everything else unchanged (scheme, domain, port, path, query).
|
|
*/
|
|
export function resourceUrlFromServerUrl(url) {
|
|
const resourceURL = typeof url === "string" ? new URL(url) : new URL(url.href);
|
|
resourceURL.hash = ''; // Remove fragment
|
|
return resourceURL;
|
|
}
|
|
/**
|
|
* Checks if a requested resource URL matches a configured resource URL.
|
|
* A requested resource matches if it has the same scheme, domain, port,
|
|
* and its path starts with the configured resource's path.
|
|
*
|
|
* @param requestedResource The resource URL being requested
|
|
* @param configuredResource The resource URL that has been configured
|
|
* @returns true if the requested resource matches the configured resource, false otherwise
|
|
*/
|
|
export function checkResourceAllowed({ requestedResource, configuredResource }) {
|
|
const requested = typeof requestedResource === "string" ? new URL(requestedResource) : new URL(requestedResource.href);
|
|
const configured = typeof configuredResource === "string" ? new URL(configuredResource) : new URL(configuredResource.href);
|
|
// Compare the origin (scheme, domain, and port)
|
|
if (requested.origin !== configured.origin) {
|
|
return false;
|
|
}
|
|
// Handle cases like requested=/foo and configured=/foo/
|
|
if (requested.pathname.length < configured.pathname.length) {
|
|
return false;
|
|
}
|
|
// Check if the requested path starts with the configured path
|
|
// Ensure both paths end with / for proper comparison
|
|
// This ensures that if we have paths like "/api" and "/api/users",
|
|
// we properly detect that "/api/users" is a subpath of "/api"
|
|
// By adding a trailing slash if missing, we avoid false positives
|
|
// where paths like "/api123" would incorrectly match "/api"
|
|
const requestedPath = requested.pathname.endsWith('/') ? requested.pathname : requested.pathname + '/';
|
|
const configuredPath = configured.pathname.endsWith('/') ? configured.pathname : configured.pathname + '/';
|
|
return requestedPath.startsWith(configuredPath);
|
|
}
|
|
//# sourceMappingURL=auth-utils.js.map
|