fix(api): report non-routable SSO URLs distinctly from malformed ones (#1653)

This commit is contained in:
Hampus authored and GitHub committed 2026-08-15 21:49:43 +02:00
1 parent 562819be09
commit 6d04fa3e6d
37 files changed
+37 -1

No files matched your search

@@ -102,7 +102,7 @@ export async function validateSsoPublicOutboundUrl(rawUrl: string, fieldName: st
redirectCount: 0,
});
} catch {
throw InputValidationError.fromCode(fieldName, ValidationErrorCodes.INVALID_URL_FORMAT);
throw InputValidationError.fromCode(fieldName, ValidationErrorCodes.URL_NOT_PUBLICLY_ROUTABLE);
}
// Return the caller's exact input rather than parsedUrl.toString(), which would normalize
// the URL (e.g. appending a trailing slash) and break exact-match comparisons such as the