Northern_Lights/cherry-studio
1
0
Fork 0
mirror of https://github.com/CherryHQ/cherry-studio.git synced 2026-01-09 06:49:02 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

fix(auth): apply URL sanitization when opening authorization link

Browse Source
This commit is contained in:
kangfenmao 2025-07-18 12:25:25 +08:00
parent e141b4771c
commit 6f73e93e9b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/main/services/mcp/oauth/provider.ts
View File

@ -4,8 +4,8 @@ import { loggerService } from '@logger'
import { getConfigDir } from '@main/utils/file' import { getConfigDir } from '@main/utils/file'
import { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth' import { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth'
import { OAuthClientInformation, OAuthClientInformationFull, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth' import { OAuthClientInformation, OAuthClientInformationFull, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth'
import { sanitizeUrl } from 'strict-url-sanitise'
import open from 'open' import open from 'open'
import { sanitizeUrl } from 'strict-url-sanitise'
import { JsonFileStorage } from './storage' import { JsonFileStorage } from './storage'
import { OAuthProviderOptions } from './types' import { OAuthProviderOptions } from './types'
@ -63,7 +63,7 @@ export class McpOAuthClientProvider implements OAuthClientProvider {
async redirectToAuthorization(authorizationUrl: URL): Promise<void> { async redirectToAuthorization(authorizationUrl: URL): Promise<void> {
try { try {
// Open the browser to the authorization URL // Open the browser to the authorization URL
await open(authorizationUrl.toString()) await open(sanitizeUrl(authorizationUrl.toString()))
logger.debug('Browser opened automatically.') logger.debug('Browser opened automatically.')
} catch (error) { } catch (error) {
logger.error('Could not open browser automatically.') logger.error('Could not open browser automatically.')