Module redirects 

Functions

append_iss 🔒

Adds the issuer as iss to a redirect back to the client, so it can detect mix-up attacks (RFC 9207).

build_authorize_qs

build_consent_redirect

build_login_redirect

error_redirect_url

The client redirect carrying an authorization error (RFC 6749 §4.1.2.1), and iss when issuer is given. None if redirect_uri is not a URL.

is_loopback_host

Whether the URL’s host is a loopback address or localhost.

pct_encode

redirect_uri_matches

Whether requested is one of the client’s registered redirect URIs. A public client’s loopback redirect URI matches on any port, because native apps listen on whatever port is free (RFC 8252 §7.3), but never with a fragment or credentials; a confidential client’s matches only exactly.

redirect_with_code

The client redirect carrying the authorization code and iss.