Skip to content

Commit 19977f8

Browse files
committed
Parsed returned url safely
1 parent 5a6e387 commit 19977f8

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

src/auth0_server_python/auth_server/server_client.py

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
import json
88
import time
99
from typing import Any, Generic, Optional, TypeVar
10-
from urllib.parse import parse_qs, urlparse
10+
from urllib.parse import parse_qs, urlencode, urlparse, urlunparse
1111

1212
import httpx
1313
import jwt
@@ -1364,7 +1364,9 @@ async def start_connect_account(
13641364
options=store_options
13651365
)
13661366

1367-
return f"{connect_response.connect_uri}?ticket={connect_response.connect_params.ticket}"
1367+
parsedUrl = urlparse(connect_response.connect_uri)
1368+
query = urlencode({"ticket": connect_response.connect_params.ticket})
1369+
return urlunparse((parsedUrl.scheme, parsedUrl.netloc, parsedUrl.path, parsedUrl.params, query, parsedUrl.fragment))
13681370

13691371
async def complete_connect_account(
13701372
self,

0 commit comments

Comments
 (0)