defenseunicorns / uds-core

A secure runtime platform for mission-critical capabilities
https://uds.defenseunicorns.com
Apache License 2.0
44 stars 18 forks source link

Authservice redirectUri passing a literal "*" #520

Closed ntwkninja closed 3 months ago

ntwkninja commented 3 months ago

Environment

Device and OS: Bottlerocket App version: Kubernetes distro being used: EKSv1.30 Other:

Steps to reproduce

  1. Configure sso: field with a redirectUri: ./* (valid for a KC client)

Expected result

Authservice redirects without a literal "/*" in the browser url

Actual Result

a literal "/*" actually appears in your redirect URL sent to keycloak (url decode to see).

Visual Proof (screenshots, videos, text, etc)

The following is the browser URL when reidrect from authservice to keycloak: https://sso.uds.dev/realms/uds/protocol/openid-connect/auth?client_id=uds-core-podinfo&nonce=&redirect_uri=https%3A%2F%2Fpodinfo.uds.dev%2F%2A&response_type=code&scope=openid&state=

Severity/Priority

Additional Context

Add any other context or screenshots about the technical debt here.