bitwarden/server
1
0
Fork 0
mirror of https://github.com/bitwarden/server synced 2026-02-07 20:23:49 +00:00
Code Issues Releases Wiki Activity

fix(redirect): [PM-26578] Https Redirection for Cloud Users - Added deeplink scheme to duo redirect uri.

Browse Source
This commit is contained in:
Patrick Pimentel
2026-01-09 15:14:21 -05:00
parent e705fe3f3f
commit 1fec4cb280
1 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
src/Core/Auth/Identity/TokenProviders/DuoUniversalTokenService.cs
View File

@@ -157,13 +157,28 @@ public class DuoUniversalTokenService(
return false;
}
private static bool IsBitwardenCloudHost(string host)
{
if (string.IsNullOrWhiteSpace(host))
{
return false;
}
var normalizedHost = host.ToLowerInvariant();
return normalizedHost.EndsWith("bitwarden.com") ||
normalizedHost.EndsWith("bitwarden.eu") ||
normalizedHost.EndsWith("bitwarden.pw");
}
public async Task<Duo.Client> BuildDuoTwoFactorClientAsync(TwoFactorProvider provider)
{
// Fetch Client name from header value since duo auth can be initiated from multiple clients and we want
// to redirect back to the initiating client
_currentContext.HttpContext.Request.Headers.TryGetValue("Bitwarden-Client-Name", out var bitwardenClientName);
var redirectUri = string.Format("{0}/duo-redirect-connector.html?client={1}",
_globalSettings.BaseServiceUri.Vault, bitwardenClientName.FirstOrDefault() ?? "web");
var requestHost = _currentContext.HttpContext?.Request?.Host.Host;
var deeplinkScheme = IsBitwardenCloudHost(requestHost) ? "https" : "bitwarden";
var redirectUri = string.Format("{0}/duo-redirect-connector.html?client={1}&deeplinkScheme={2}",
_globalSettings.BaseServiceUri.Vault, bitwardenClientName.FirstOrDefault() ?? "web", deeplinkScheme);
var client = new Duo.ClientBuilder(
(string)provider.MetaData["ClientId"],