If authority segments <3, throw

AzureAD · Nov 6, 2024 · 37930fb · 37930fb
1 parent d00ce0d
commit 37930fb
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/apps/internal/oauth/ops/authority/authority.go b/apps/internal/oauth/ops/authority/authority.go
@@ -362,7 +362,7 @@ func NewInfoFromAuthorityURI(authority string, validateAuthority bool, instanceD
 	cannonicalAuthority := authority
 
 	// suffix authority with / if it doesn't have one
-	if !strings.HasSuffix(authority, "/") {
+	if !strings.HasSuffix(cannonicalAuthority, "/") {
 		cannonicalAuthority += "/"
 	}
 
@@ -376,7 +376,7 @@ func NewInfoFromAuthorityURI(authority string, validateAuthority bool, instanceD
 	}
 
 	pathParts := strings.Split(u.EscapedPath(), "/")
-	if len(pathParts) < 2 {
+	if len(pathParts) < 3 {
 		return Info{}, errors.New(`authority must be an URL such as "https://login.microsoftonline.com/<your tenant>"`)
 	}