commento/api/oauth_google_redirect.go
Adhityaa ef0f45527a everywhere: use different session cookie names
If the user is hosting the dashboard in the same domain as
their blog (with a nginx suburi, for example), the two session
cookies clash; logging into one service logs you out of the other.
With this patch, both have separate names.

Fixes https://gitlab.com/commento/commento-ce/issues/49
2018-06-20 08:59:55 +05:30

26 lines
597 B
Go

package main
import (
"fmt"
"net/http"
)
func googleRedirectHandler(w http.ResponseWriter, r *http.Request) {
if googleConfig == nil {
logger.Errorf("google oauth access attempt without configuration")
fmt.Fprintf(w, "error: this website has not configured Google OAuth")
return
}
commenterToken := r.FormValue("commenterToken")
_, err := commenterGetByCommenterToken(commenterToken)
if err != nil && err != errorNoSuchToken {
fmt.Fprintf(w, "error: %s\n", err.Error())
return
}
url := googleConfig.AuthCodeURL(commenterToken)
http.Redirect(w, r, url, http.StatusFound)
}