Skip to content

Limit inviteAcceptDialog values to URL path or base that exactly matc… - #924

Open
VicDeo wants to merge 1 commit into
mainfrom
ignore-unknown-invite-urls
Open

VicDeo wants to merge 1 commit into
mainfrom
ignore-unknown-invite-urls

Conversation

@VicDeo

@VicDeo VicDeo commented Oct 27, 2026 •

Copy link
Copy Markdown

…hes the provider domain and proto.

inviteAcceptDialog is an URL path, not an absolute URL.

https://github.com/cs3org/OCM-API/blob/develop/IETF-OCM.md?plain=1#L765

OPTIONAL: inviteAcceptDialog (string) - URL path of a web page where a user can accept an invite, when query parameters "token" and "providerDomain" are provided. Implementations that offer the "invites" capability SHOULD provide this URL as well in order to enhance the UX of the Invite Flow. If for example "/index.php/apps/sciencemesh/accept" is specified here then a WAYF Page SHOULD redirect the end-user to /index.php/apps/sciencemesh/accept?token=zi5kooKu3ivohr9a&providerDomain=cloud.example.org.

For the backward compatibility we allow it to be an absolute URL if both proto and host match the idp provider proto and host accordingly.
Introduced a new error for the incorrect inviteAcceptDialog value.

@github-actions

Copy link
Copy Markdown

Label error. Requires at least 1 of: Type:Bug, Type:Enhancement, Type:Feature, Type:Breaking-Change, Type:Test, Type:Documentation, Type:Maintenance, Type:Security, Type:Dependencies, Type:DevOps, dependencies. Found:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant