From bb79a3e13873f9937f3e69cef7d3f45d287bf137 Mon Sep 17 00:00:00 2001
From: st <st@localhost.localdomain>
Date: Fri, 20 Nov 2020 10:03:29 +0000
Subject: [PATCH] KEYCLOAK-11699 add support for 127.0.0.1 for native app

---
 src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java |   15 +++++++--------
 1 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java b/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java
index dd8cebb..d05c3a1 100644
--- a/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java
+++ b/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java
@@ -31,6 +31,7 @@
 import java.util.Collection;
 import java.util.HashSet;
 import java.util.Set;
+import java.util.stream.Collectors;
 
 /**
  * @author <a href="mailto:sthorger@redhat.com">Stian Thorgersen</a>
@@ -70,13 +71,11 @@
     }
 
     private static Set<String> getValidateRedirectUris(KeycloakSession session) {
-        Set<String> redirects = new HashSet<>();
-        for (ClientModel client : session.getContext().getRealm().getClients()) {
-            if (client.isEnabled()) {
-                redirects.addAll(resolveValidRedirects(session, client.getRootUrl(), client.getRedirectUris()));
-            }
-        }
-        return redirects;
+        return session.getContext().getRealm().getClientsStream()
+                .filter(ClientModel::isEnabled)
+                .map(c -> resolveValidRedirects(session, c.getRootUrl(), c.getRedirectUris()))
+                .flatMap(Collection::stream)
+                .collect(Collectors.toSet());
     }
 
     private static String verifyRedirectUri(KeycloakSession session, String rootUrl, String redirectUri, Set<String> validRedirects, boolean requireRedirectUri) {
@@ -116,7 +115,7 @@
 
             boolean valid = matchesRedirects(resolveValidRedirects, r);
 
-            if (!valid && r.startsWith(Constants.INSTALLED_APP_URL) && r.indexOf(':', Constants.INSTALLED_APP_URL.length()) >= 0) {
+            if (!valid && (r.startsWith(Constants.INSTALLED_APP_URL) || r.startsWith(Constants.INSTALLED_APP_LOOPBACK)) && r.indexOf(':', Constants.INSTALLED_APP_URL.length()) >= 0) {
                 int i = r.indexOf(':', Constants.INSTALLED_APP_URL.length());
 
                 StringBuilder sb = new StringBuilder();

--
Gitblit v1.10.0