Fixed the encoded redirect_uri issue.

dexidp · Apr 23, 2024 · 021279b · 021279b
1 parent 677ab36
commit 021279b
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/server/handlers.go b/server/handlers.go
@@ -880,7 +880,11 @@ func (s *Server) calculateCodeChallenge(codeVerifier, codeChallengeMethod string
 func (s *Server) handleAuthCode(w http.ResponseWriter, r *http.Request, client storage.Client) {
 	ctx := r.Context()
 	code := r.PostFormValue("code")
-	redirectURI := r.PostFormValue("redirect_uri")
+	redirectURI, err := url.QueryUnescape(r.PostFormValue("redirect_uri"))
+	if err != nil {
+		s.tokenErrHelper(w, errInvalidRequest, "No redirect_uri provided.", http.StatusBadRequest)
+		return
+	}
 
 	if code == "" {
 		s.tokenErrHelper(w, errInvalidRequest, `Required param: code.`, http.StatusBadRequest)