mirror of
https://github.com/databasus/databasus.git
synced 2026-04-06 00:32:03 +02:00
Redirect to https://postgresus.com/storages/google-oauth instead of my hosted Postgresus domain #361
Assignees
MrUnknownDE
Clear assignees
MrUnknownDE
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github/databasus#361
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @wzzrd on 12/11/2025
This is a re-open of https://github.com/RostislavDugin/postgresus/issues/63
Hi @RostislavDugin! I really like your app, and thanks for writing it and making it open source
However, this (the OAuth redirect URL) really should be configurable. I assume good intentions here, but it's a huge red flag to send OAuth credentials to an unknown and uncontrolled location (from a user's perspective).
Many self-hosters and small enterprises (which I assume if your target audience) will have proper HTTPS, including "real" domains.
I would really prefer to have this done the proper way, with configurable "Authorized redirect URIs" and "Authorized JavaScript origins", and not sending (sensitive!) OAuth credentials to a place where - with respect - they do not belong.