NAS-128632 / 13.3 / Fixing oauth forms (#10109)

truenas · May 27, 2024 · 4c3404a · 4c3404a
1 parent abe240b
commit 4c3404a
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/...pages/common/entity/entity-form/components/form-oauth-login/form-oauth-login.component.ts b/...pages/common/entity/entity-form/components/form-oauth-login/form-oauth-login.component.ts
@@ -35,6 +35,9 @@ export class FormOauthLoginComponent implements Field {
   }
 
   doAuth(message: OauthJiraMessage): void {
+    if (message.origin !== 'https://www.truenas.com') {
+      return;
+    }
     const token = message.data as string;
     this.group.controls[this.config.name].setValue(token);
   }

diff --git a/...pp/pages/system/CloudCredentials/cloudcredentials-form/cloudcredentials-form.component.ts b/...pp/pages/system/CloudCredentials/cloudcredentials-form/cloudcredentials-form.component.ts
@@ -1245,6 +1245,9 @@ export class CloudCredentialsFormComponent {
         window.addEventListener('message', doAuth, false);
 
         function doAuth(message) {
+          if (message.origin !== 'https://www.truenas.com') {
+            return;
+          }
           window.removeEventListener('message', doAuth);
           if (message.data.oauth_portal) {
             if (message.data.error) {

diff --git a/src/app/pages/system/email/email.component.ts b/src/app/pages/system/email/email.component.ts
@@ -285,6 +285,9 @@ export class EmailComponent implements OnDestroy {
             window.addEventListener('message', doAuth, false);
 
             function doAuth(message) {
+              if (message.origin !== 'https://www.truenas.com') {
+                return;
+              }
               if (message.data.oauth_portal) {
                 if (message.data.error) {
                   dialogService.errorReport(T('Error'), message.data.error);