-
Notifications
You must be signed in to change notification settings - Fork 9.4k
Only add referrer param to login url if referrer is a GET request #32891
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Only add referrer param to login url if referrer is a GET request #32891
Conversation
Hi @mfickers. Thank you for your contribution
❗ Automated tests can be triggered manually with an appropriate comment:
You can find more information about the builds here ℹ️ Please run only needed test builds instead of all when developing. Please run all test builds before sending your PR for review. For more details, please, review the Magento Contributor Guide documentation. 🕙 You can find the schedule on the Magento Community Calendar page. 📞 The triage of Pull Requests happens in the queue order. If you want to speed up the delivery of your contribution, please join the Community Contributions Triage session to discuss the appropriate ticket. 🎥 You can find the recording of the previous Community Contributions Triage on the Magento Youtube Channel ✏️ Feel free to post questions/proposals/feedback related to the Community Contributions Triage process to the corresponding Slack Channel |
@magento run all tests |
Can you cover this changes with some kind of automation tests |
@mrtuvn I've added an integration test to make sure there is no referer parameter on an unsuccessful login attempt. |
@magento run all tests |
@magento run Functional Tests B2B |
The requested builds are added to the queue. You should be able to see them here within a few minutes. Please re-request them if they don't show in a reasonable amount of time. |
@magento run Functional Tests B2B |
The requested builds are added to the queue. You should be able to see them here within a few minutes. Please re-request them if they don't show in a reasonable amount of time. |
Seem fail tests not related with your changes |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changes seem ok with me
Hi @mrtuvn, thank you for the review. |
Hi @mfickers, thank you for your contribution! |
Description (*)
This fixes a bug where, after an unsuccessful login attempt, the URL /customer/account/loginPost was added as referrer param to the login URL on redirect.
A second, successful login attempt would then redirect the user to this URL, displaying a 404 page because the route only handles POST requests.
This is fixed by checking if the current request is a GET request before adding the URL as referrer parameter.
Fixed Issues (if relevant)
Manual testing scenarios (*)
Questions or comments
This does not break the general referrer functionality. I've made sure that e.g. the redirect after login when adding an item to the wishlist still works as expected.
Contribution checklist (*)