From 59de0d00a6c91746d10c6de4637802429efd1b15 Mon Sep 17 00:00:00 2001 From: Nicolas Mattia Date: Wed, 30 Mar 2022 18:41:39 +0200 Subject: [PATCH 1/2] feat: warn on bad origin This adds a debug message in case II is replying with a bad origin. --- packages/auth-client/src/index.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/auth-client/src/index.ts b/packages/auth-client/src/index.ts index 4c6eadf6a..a9f715fb3 100644 --- a/packages/auth-client/src/index.ts +++ b/packages/auth-client/src/index.ts @@ -307,6 +307,7 @@ export class AuthClient { private _getEventHandler(identityProviderUrl: URL, options?: AuthClientLoginOptions) { return async (event: MessageEvent) => { if (event.origin !== identityProviderUrl.origin) { + console.log(`WARNING: expected origin '${identityProviderUrl.origin}', got '${event.origin}' (ignoring)`); return; } From af9620d7a50c3d0644b9b3d3283d3e6d839c4479 Mon Sep 17 00:00:00 2001 From: Kyle Peacock Date: Wed, 30 Mar 2022 10:34:35 -0700 Subject: [PATCH 2/2] Update packages/auth-client/src/index.ts --- packages/auth-client/src/index.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/auth-client/src/index.ts b/packages/auth-client/src/index.ts index a9f715fb3..ccf2272ef 100644 --- a/packages/auth-client/src/index.ts +++ b/packages/auth-client/src/index.ts @@ -307,7 +307,7 @@ export class AuthClient { private _getEventHandler(identityProviderUrl: URL, options?: AuthClientLoginOptions) { return async (event: MessageEvent) => { if (event.origin !== identityProviderUrl.origin) { - console.log(`WARNING: expected origin '${identityProviderUrl.origin}', got '${event.origin}' (ignoring)`); + console.warn(`WARNING: expected origin '${identityProviderUrl.origin}', got '${event.origin}' (ignoring)`); return; }