oidcserver: permit origin "*" from localhost testing

2026-03-16 07:21:55 +05:30
parent c15e342bb8
commit db974d72d5
1 changed files with 1 additions and 1 deletions
--- a/src/oidcserver.js
+++ b/src/oidcserver.js
@@ -724,7 +724,7 @@ async function start() {
        },
        clientBasedCORS(ctx, origin, client) {
            // allow CORS for clients where at least the origin matches where we redirect back to
-            if (client.redirectUris.find((u) => u.indexOf(origin) === 0)) return true;
+            if (client.redirectUris.find((u) => origin === '*' || u.indexOf(origin) === 0)) return true;

            return false;
        },