oauth2's turn

vendor/code.superseriousbusiness.org/oauth2/v4/manage/util.go

@@ -0,0 +1,30 @@
+package manage
+
+import (
+	"net/url"
+	"strings"
+
+	"code.superseriousbusiness.org/oauth2/v4/errors"
+)
+
+type (
+	// ValidateURIHandler validates that redirectURI is contained in baseURI
+	ValidateURIHandler func(baseURI, redirectURI string) error
+)
+
+// DefaultValidateURI validates that redirectURI is contained in baseURI
+func DefaultValidateURI(baseURI string, redirectURI string) error {
+	base, err := url.Parse(baseURI)
+	if err != nil {
+		return err
+	}
+
+	redirect, err := url.Parse(redirectURI)
+	if err != nil {
+		return err
+	}
+	if !strings.HasSuffix(redirect.Host, base.Host) {
+		return errors.ErrInvalidRedirectURI
+	}
+	return nil
+}