frontend: Redirect to the authorization server from the apiserver

nexodus-io / nexodus

Network Connectivity as a Service

https://nexodus.io

Apache License 2.0

57 stars 26 forks source link

Closed chirino closed 4 months ago

chirino commented 4 months ago

This simplifies the apiserver logic, and improves security since the Web browser never get access to the access/refresh tokens.

No longer need to configure the redirect URL on the apiserver
the /web/login/start and /web/login/end endpoints are now simpler GET operations that use redirects.
/web/refresh now does NOT send the tokens back to the frontend
Keycloak is configured to redirect to the apiserver instead of the front end.

netlify[bot] commented 4 months ago

Name	Link
Latest commit	507b70f0345edb0283e9571f21264147813af20b
Latest deploy log	https://app.netlify.com/sites/nexodus-docs/deploys/65cf86a7055de600086df1fc

chirino commented 4 months ago

@nerdalert I've not verified it, but this simplification might fix the double login issue.