|
|
@@ -21,7 +21,7 @@ class AuthController{
|
|
|
let durl=/http:\/\/([^\/]+)\//i;
|
|
|
let domain = redirect_uri.match(durl)[1];
|
|
|
// console.log('domain',domain);
|
|
|
- if(allowed_redirect_domains.indexOf(domain) < 0){
|
|
|
+ if(allowed_redirect_domains.filter(item => domain.indexOf(domain) >= 0).length){
|
|
|
ctx.body=Response.failed("非法请求,拒绝访问");
|
|
|
}else{
|
|
|
ctx.cookies.set('redirect_uri', redirect_uri, {
|
