cannot redirect to other site with OIDC login and empty redirect_url parameter

[pborn-ionos]

PR #20025 broke Harbor for us.

We have OIDC enabled and the user is on /account/sign-in, the login button for OIDC points to /c/oidc/#?redirect_url= and an empty redirect_url errors out with

{
  "errors": [
    {
      "code": "BAD_REQUEST",
      "message": "cannot redirect to other site"
    }
  ]
}

[Vad1mo]

Ok, do I understand you correctly that you want that redirect_url="" is supported?

[stonezdj]

Because the default value for redirect_url is /harbor/projects/when click the OIDC login button, How did you set the redirect_url to an empty string?

[pborn-ionos]

We did not explicitly set it like that. It just happened and caused user complaints, requiring us to downgrade.