Function validateExtensionRedirectUri

packages/web-backend/src/Extension/Http.ts:25–67

(redirectUri: string)

const CHROMIUM_IDENTITY_HOST_SUFFIX = ".chromiumapp.org";

const validateExtensionRedirectUri = (redirectUri: string) =>
	Effect.gen(function* () {
		const url = yield* Effect.try({
			try: () => new URL(redirectUri),
			catch: () => new HttpApiError.BadRequest(),
		});

		if (
			url.protocol !== "https:" ||
			!url.hostname.endsWith(CHROMIUM_IDENTITY_HOST_SUFFIX)
		) {
			return yield* new HttpApiError.BadRequest();
		}

		const extensionId = url.hostname.slice(
			0,
			-CHROMIUM_IDENTITY_HOST_SUFFIX.length,
		);
		const configuredExtensionId = serverEnv().CAP_CHROME_EXTENSION_ID;

		if (configuredExtensionId) {
			if (extensionId !== configuredExtensionId) {
				return yield* new HttpApiError.BadRequest();
			}
			return url;
		}

		// Without a pinned extension id, any installed extension could mint a
		// signed-in user's auth key through this flow. The only deployment
		// where accepting an arbitrary id is safe is localhost development;
		// every reachable deployment (staging, previews, self-hosted) must set
		// CAP_CHROME_EXTENSION_ID regardless of NODE_ENV.
		const webHostname = new URL(serverEnv().WEB_URL).hostname;
		const isLocalDevelopment =
			serverEnv().NODE_ENV !== "production" &&
			(webHostname === "localhost" || webHostname === "127.0.0.1");

		if (!isLocalDevelopment) {
			return yield* new HttpApiError.BadRequest();
		}

		return url;
	});

const redirectToLogin = (nextUrl: URL) => {
	const loginUrl = new URL("/login", serverEnv().WEB_URL);