Repository navigation
Auth (Desktop): Route SecureTokenRequest and SignUpRequest to Auth Emulator - #1937
AustinBenoit wants to merge 2 commits into
Conversation
…ulator SecureTokenRequest (token refresh / GetToken) and SignUpRequest (linking an email/password credential to an anonymous account) hardcoded https:// production endpoints instead of calling AuthRequest::GetUrl(), bypassing the Auth Emulator. Parameterize AuthRequest::GetUrl(const char* server_url = kServerURL), use GetUrl(api_host) in SecureTokenRequest and SignUpRequest, and add unit tests verifying both production and emulator URLs across all desktop Auth RPC request classes.
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request fixes an issue where SecureTokenRequest and SignUpRequest were always sent to production endpoints instead of the Auth Emulator. This is resolved by modifying AuthRequest::GetUrl to accept a dynamic server_url parameter, and updating the requests and tests accordingly. Regarding the feedback, a potential issue was identified in AuthRequest::GetUrl where the server_url parameter is not checked for nullptr before being appended to a std::string, which could lead to undefined behavior or crashes.
| std::string AuthRequest::GetUrl(const char* server_url) { | ||
| Auth* auth_ptr = Auth::GetAuth(&app); |
There was a problem hiding this comment.
The server_url parameter is a raw pointer (const char*) and is not checked for nullptr before being appended to std::string on lines 84 and 90. Appending a null pointer to a std::string results in undefined behavior (typically a crash). Consider adding a defensive check at the beginning of the function to handle a null server_url gracefully.
std::string AuthRequest::GetUrl(const char* server_url) {\n if (server_url == nullptr) {\n return "";\n }\n Auth* auth_ptr = Auth::GetAuth(&app);
2 participants
Description
SecureTokenRequest (token refresh / GetToken) and SignUpRequest (linking an email/password credential to an anonymous account) hardcoded https:// production endpoints instead of calling AuthRequest::GetUrl(), bypassing the Auth Emulator.
Testing
Test manually with local test app. Added unit test to verify
Type of Change
Place an
xthe applicable box:Notes
Release Notessection ofrelease_build_files/readme.md.Fixes: #1934