jeremyevans / rodauth

Ruby's Most Advanced Authentication Framework
http://rodauth.jeremyevans.net
MIT License
1.7k stars 95 forks source link

Set the redirect-after-login path as the fullpath only when it's a GET request #123

Closed HoneyryderChuck closed 4 years ago

HoneyryderChuck commented 4 years ago

Fixes #122 .

When setting the redirect url as the result of a POST submission, the fullpath might not render a page when issued in a GET request, which is what it's going to happen once the user logs in.

I've also added the request referer as the redirect url for non-GET requests, but this is still subject to revision.