d_s_bisht/devsofttech_hms_ci4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: prevent stale workspace URL from post-login redirect

Browse Source
This commit is contained in:
DevSoftTech Server 2026-04-08 10:04:08 +05:30
parent 1a2dbf5366
commit bde51a8b69
1 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
app/Config/Auth.php
View File

@ -441,7 +441,20 @@ class Auth extends ShieldAuth
public function loginRedirect(): string
{
$session = session();
$url = $session->getTempdata('beforeLoginUrl') ?? setting('Auth.redirects')['login'];
$beforeLoginUrl = (string) ($session->getTempdata('beforeLoginUrl') ?? '');
// Some AJAX workspace URLs can be stored as beforeLoginUrl in production
// and then hijack post-login landing. Skip those and use configured default.
if ($beforeLoginUrl !== '') {
$path = (string) parse_url($beforeLoginUrl, PHP_URL_PATH);
$path = '/' . ltrim($path, '/');
if ($path === '/doctor_work/document_workspace') {
$beforeLoginUrl = '';
$session->removeTempdata('beforeLoginUrl');
}
}
$url = $beforeLoginUrl !== '' ? $beforeLoginUrl : (string) setting('Auth.redirects')['login'];
return $this->getUrl($url);
}