Skip to content

Fix authentication URL normalization - #609

Merged
majd merged 1 commit into
mainfrom
branch/fix-authentication-trailing-slash
Oct 5, 2026
Merged

majd merged 1 commit into
mainfrom
branch/fix-authentication-trailing-slash

Conversation

@majd

@majd majd commented Oct 5, 2026

Copy link
Copy Markdown
Owner

Normalize the validated authentication URL from Apple's bag to /authenticate/ to address unusable responses from the bare path. Preserve the host and query parameters, and leave server-provided redirect destinations unchanged.

Add regression coverage for URL normalization, validation, and initial login requests.

@majd
majd marked this pull request as ready for review October 5, 2026 21:33
@majd
majd enabled auto-merge (rebase) October 5, 2026 21:34
@majd
majd merged commit f9aa653 into main Oct 5, 2026
16 checks passed
@majd
majd deleted the branch/fix-authentication-trailing-slash branch October 5, 2026 21:39
TO8E pushed a commit to TO8E/AssppWeb that referenced this pull request Oct 7, 2026
将 Apple Bag 中 buy 与 pod 的登录地址规范化为 authenticate/,保留域名和查询参数,避免裸路径返回无效响应或无 Location 的 301。
仅处理初始 Bag 地址,保留原有 native 端点兼容逻辑和服务端重定向地址。
补充 Bag、查询参数以及重定向后签名 POST、Cookie 和验证码的回归覆盖。

移植自 ipatool 的修复,保留上游提交信息:
fix: normalize the initial authentication url path

Upstream-Commit: f9aa6536cd2db16ab93f663d8731e4300921c132
Refs: majd/ipatool#609
Co-authored-by: Majd Alfhaily <majd@alfhaily.me>
TO8E pushed a commit to TO8E/AssppWeb that referenced this pull request Oct 7, 2026
将 Apple Bag 中 buy 与 pod 的登录地址规范化为 authenticate/,保留域名和查询参数,避免裸路径返回无效响应或无 Location 的 301。
仅处理初始 Bag 地址,保留原有 native 端点兼容逻辑和服务端重定向地址。
补充 Bag、查询参数以及重定向后签名 POST、Cookie 和验证码的回归覆盖。

移植自 ipatool 的修复,保留上游提交信息:
fix: normalize the initial authentication url path

Upstream-Commit: f9aa6536cd2db16ab93f663d8731e4300921c132
Refs: majd/ipatool#609
Co-authored-by: Majd Alfhaily <majd@alfhaily.me>
(cherry picked from commit d4df8e6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant