Skip to content

Commit 3ce8e80

Browse files
committed
debug + fix using .host instead of obj
1 parent 047c8b0 commit 3ce8e80

1 file changed

Lines changed: 4 additions & 1 deletion

File tree

‎src/routes/oauth-mail.js‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -116,6 +116,7 @@ router.get("/authorize", async (req, res, next) => {
116116
let originalHost = req.get("host")
117117

118118
if (referer) {
119+
logger.info("Using Referer...")
119120
try {
120121
originalHost = new URL(referer).host
121122
} catch {
@@ -129,6 +130,8 @@ router.get("/authorize", async (req, res, next) => {
129130
originalHost,
130131
)
131132

133+
logger.info("Host: ", originalHost)
134+
132135
// state is attacker-influenced (comes from mailcow's query string),
133136
// so it must never be used directly as a cache key.
134137
// Generate our own random nonce instead
@@ -230,7 +233,7 @@ router.get("/mailbox", async (req, res, next) => {
230233
return res.status(400).send("No pending mail session")
231234
}
232235

233-
const originalHost = await GetFromCache(`state:${mailData.state}`)
236+
const originalHost = await GetFromCache(`state:${mailData.state}`)?.host
234237

235238
const tokenRes = await GetFromCache(`code:${mailData.code}`)
236239

0 commit comments

Comments
 (0)