jeans/core
jeans/core
1
0
Fork 0
mirror of https://github.com/home-assistant/core.git synced 2025-07-24 05:37:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update allowlisted OAuth redirect URIs for Wear OS (#77411)

Browse Source
This commit is contained in:
Joris Pelgröm 2022-08-30 03:52:10 +02:00 committed by GitHub
parent 79b5147b46
commit fa0dfd812c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 22 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
homeassistant/components/auth/indieauth.py
View File

@ -38,9 +38,15 @@ async def verify_redirect_uri(
# Whitelist the iOS and Android callbacks so that people can link apps
# without being connected to the internet.
if redirect_uri == "homeassistant://auth-callback" and client_id in (
"https://home-assistant.io/android",
"https://home-assistant.io/iOS",
if (
client_id == "https://home-assistant.io/iOS"
and redirect_uri == "homeassistant://auth-callback"
):
return True
if client_id == "https://home-assistant.io/android" and redirect_uri in (
"homeassistant://auth-callback",
"https://wear.googleapis.com/3p_auth/io.homeassistant.companion.android",
):
return True

13
tests/components/auth/test_indieauth.py
View File

@ -183,3 +183,16 @@ async def test_verify_redirect_uri_android_ios(client_id):
assert not await indieauth.verify_redirect_uri(
None, "https://incorrect.com", "homeassistant://auth-callback"
)
if client_id == "https://home-assistant.io/android":
assert await indieauth.verify_redirect_uri(
None,
client_id,
"https://wear.googleapis.com/3p_auth/io.homeassistant.companion.android",
)
else:
assert not await indieauth.verify_redirect_uri(
None,
client_id,
"https://wear.googleapis.com/3p_auth/io.homeassistant.companion.android",
)