Should fix issue with app having to authorize it's own routes

PixNyb · Jan 23, 2025 · 25d662b · 25d662b
1 parent c3470db
commit 25d662b
Showing 1 changed file with 10 additions and 6 deletions.
diff --git a/src/middlewares/authorization.js b/src/middlewares/authorization.js
@@ -13,7 +13,7 @@ const strategies = require("../strategies");
 
 module.exports = (req, res) => {
   const path = (req.forwardedUri || req.url).split("?")[0];
-  const applicationRoutes = [
+  let applicationRoutes = [
     `/healthz`,
     `${AUTH_PREFIX}/`,
     `${AUTH_PREFIX}/refresh`,
@@ -22,11 +22,15 @@ module.exports = (req, res) => {
     `${AUTH_PREFIX}/remove-cookies`,
     `${PROMETHEUS_PREFIX}/metrics`
   ]
-  const providerRoutes = Object.values(strategies).reduce((acc, strategy) => {
-    if (strategy.params.loginURL) acc.push(strategy.params.loginURL);
-    if (strategy.params.callbackURL) acc.push(strategy.params.callbackURL);
-    return acc;
-  }, []);
+  let providerRoutes = [];
+  Object.entries(strategies).forEach(([, strategyConfig]) => {
+    const { loginURL, callbackURL } = strategyConfig.params;
+    providerRoutes.push(loginURL);
+    providerRoutes.push(callbackURL);
+  });
+
+  applicationRoutes = [...new Set(applicationRoutes)];
+  providerRoutes = [...new Set(providerRoutes)];
 
   if (providerRoutes.includes(path) || applicationRoutes.includes(path)) {
     return res.sendStatus(200);