Add back validation

mitodl · Nov 14, 2023 · 5c15a64 · 5c15a64
1 parent b5bac7b
commit 5c15a64
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/...loak/ol-spi/src/main/java/authentication/authenticators/browser/UsernamePasswordForm.java b/...loak/ol-spi/src/main/java/authentication/authenticators/browser/UsernamePasswordForm.java
@@ -9,6 +9,7 @@
 import org.keycloak.services.resources.LoginActionsService;
 
 import java.net.URI;
+import java.net.URISyntaxException;
 import java.util.List;
 import java.util.stream.Collectors;
 
@@ -36,6 +37,11 @@ public void authenticate(AuthenticationFlowContext context) {
                 uriBuilder.queryParam(LoginActionsService.SESSION_CODE, accessCode);
             }
             URI baseUriWithCodeAndClientId = uriBuilder.build();
+            try {
+                new URI(baseUriWithCodeAndClientId.getPath());
+            } catch (URISyntaxException e) {
+                throw new RuntimeException(e);
+            }
             form.setAttribute("unlinkedProviders", new IdentityProviderBean(realm, session, realmIdentityProvidersList, baseUriWithCodeAndClientId));
         }
         super.authenticate(context);