Repository navigation
Fix authentication URL normalization - #609
Merged
Merged
Conversation
majd
marked this pull request as ready for review
October 5, 2026 21:33
majd
enabled auto-merge (rebase)
October 5, 2026 21:34
TO8E
pushed a commit
to TO8E/AssppWeb
that referenced
this pull request
Oct 7, 2026
将 Apple Bag 中 buy 与 pod 的登录地址规范化为 authenticate/,保留域名和查询参数,避免裸路径返回无效响应或无 Location 的 301。 仅处理初始 Bag 地址,保留原有 native 端点兼容逻辑和服务端重定向地址。 补充 Bag、查询参数以及重定向后签名 POST、Cookie 和验证码的回归覆盖。 移植自 ipatool 的修复,保留上游提交信息: fix: normalize the initial authentication url path Upstream-Commit: f9aa6536cd2db16ab93f663d8731e4300921c132 Refs: majd/ipatool#609 Co-authored-by: Majd Alfhaily <majd@alfhaily.me>
TO8E
pushed a commit
to TO8E/AssppWeb
that referenced
this pull request
Oct 7, 2026
将 Apple Bag 中 buy 与 pod 的登录地址规范化为 authenticate/,保留域名和查询参数,避免裸路径返回无效响应或无 Location 的 301。 仅处理初始 Bag 地址,保留原有 native 端点兼容逻辑和服务端重定向地址。 补充 Bag、查询参数以及重定向后签名 POST、Cookie 和验证码的回归覆盖。 移植自 ipatool 的修复,保留上游提交信息: fix: normalize the initial authentication url path Upstream-Commit: f9aa6536cd2db16ab93f663d8731e4300921c132 Refs: majd/ipatool#609 Co-authored-by: Majd Alfhaily <majd@alfhaily.me> (cherry picked from commit d4df8e6)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Normalize the validated authentication URL from Apple's bag to
/authenticate/to address unusable responses from the bare path. Preserve the host and query parameters, and leave server-provided redirect destinations unchanged.Add regression coverage for URL normalization, validation, and initial login requests.