Fix broken getSecureRedirect

intuitem · Dec 3, 2024 · a8b25bd · a8b25bd
1 parent adeca33
commit a8b25bd
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/frontend/src/routes/(authentication)/login/+page.server.ts b/frontend/src/routes/(authentication)/login/+page.server.ts
@@ -132,7 +132,9 @@ export const actions: Actions = {
 		}
 
 		const next = url.searchParams.get('next') || '/';
-		const redirectURL = getSecureRedirect(next) + (CI_TEST ? '' : '?refresh=1');
+		const secureNext = getSecureRedirect(next);
+		const refreshQueryParam = (CI_TEST ? '' : '?refresh=1');
+		const redirectURL = secureNext ? `${secureNext}${refreshQueryParam}` : `/${refreshQueryParam}`;
 		redirect(302, redirectURL);
 	},
 	mfaAuthenticate: async (event) => {