Custom redirects - what were the issues ? about doorman

[mnutt]

It's been a few years, and I actually can't remember the exact issue. I believe what happened was:

1. user was on a page and their session expired
2. page made an (expired) ajax call, req.session.redirectTo set to the ajax URL
3. user reloads the page, sees the doorman login
4. user logs in, gets redirect to the ajax URL.

I think this may be able to be remedied by only setting redirectURL for responses of type text/html.

[kuahyeow]

Okay thanks for the info. I'll patch something up and try to submit a PR if
its looking good
On 8 Dec 2014 10:35, "Michael Nutt" [email protected] wrote:

It's been a few years, and I actually can't remember the exact issue. I
believe what happened was:

1. user was on a page and their session expired
2. page made an (expired) ajax call, req.session.redirectTo set to the
   ajax URL
3. user reloads the page, sees the doorman login
4. user logs in, gets redirect to the ajax URL.

I think this may be able to be remedied by only setting redirectURL for
responses of type text/html.

—
Reply to this email directly or view it on GitHub
#24 (comment).