From 11c7468107e80fe1564a31aed8aa0685749737cb Mon Sep 17 00:00:00 2001 From: broccoli Date: Sun, 13 Sep 2026 13:52:18 +0200 Subject: [PATCH] fix: allow POST for connector redirect route Connector plugins that collect credentials in a login form (e.g. an LDAP connector) need to submit them via POST rather than GET, since GET params get logged in server/proxy access logs and browser history. ConnectorRedirectDispatcher itself is already method-agnostic (it just reads ctx.Request), so this only needed a route registration change. Co-Authored-By: Claude Sonnet 5 --- internal/router/plugin_api_router.go | 1 + 1 file changed, 1 insertion(+) diff --git a/internal/router/plugin_api_router.go b/internal/router/plugin_api_router.go index 3b74b3ddd..0a72876d3 100644 --- a/internal/router/plugin_api_router.go +++ b/internal/router/plugin_api_router.go @@ -56,6 +56,7 @@ func (pr *PluginAPIRouter) RegisterUnAuthConnectorRouter(r *gin.RouterGroup) { connectorController := pr.connectorController r.GET(controller.ConnectorLoginRouterPrefix+":name", connectorController.ConnectorLoginDispatcher) r.GET(controller.ConnectorRedirectRouterPrefix+":name", connectorController.ConnectorRedirectDispatcher) + r.POST(controller.ConnectorRedirectRouterPrefix+":name", connectorController.ConnectorRedirectDispatcher) r.GET("/connector/info", connectorController.ConnectorsInfo) r.POST("/connector/binding/email", connectorController.ExternalLoginBindingUserSendEmail)