whs-authz-authn/caido-plugin-test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Update] oauth 탐지 로직 정교화

Browse source
This commit is contained in:
tv0924@icloud.com 2025-06-02 10:50:11 +09:00
commit b8b7edb5ac
4 changed files with 180 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

18
packages/backend/src/utils/http.ts
View file

@ -48,8 +48,8 @@ export class HttpUtils {
}
getQueryParamFromURI(uri: string, key: string): string | null {
uri = uri.toLowerCase();
key = key.toLowerCase();
uri = this.decodeAndLower(uri);
key = this.decodeAndLower(key);
try {
const urlObj = new URL(uri);
return urlObj.searchParams.get(key);
@ -66,8 +66,8 @@ export class HttpUtils {
* @returns - 해당 파라미터 값, 없으면 null
*/
getQueryParam(query: string, key: string): string | null {
query = query.toLowerCase();
key = key.toLowerCase();
query = this.decodeAndLower(query);
key = this.decodeAndLower(key);
const params = new URLSearchParams(query);
return params.get(key);
@ -82,9 +82,9 @@ export class HttpUtils {
* @returns - "a=1&b=2&c=3..." 형태의 새로운 쿼리 문자열
*/
setQueryParam(query: string, key: string, value: string): string {
query = query.toLowerCase();
key = key.toLowerCase();
value = value.toLowerCase();
query = this.decodeAndLower(query);
key = this.decodeAndLower(key);
value = this.decodeAndLower(value);
const params = new URLSearchParams(query);
params.set(key, value);
@ -99,8 +99,8 @@ export class HttpUtils {
* @returns - 삭제된 상태의 새로운 쿼리 문자열
*/
removeQueryParam(query: string, key: string): string {
query = query.toLowerCase();
key = key.toLowerCase();
query = this.decodeAndLower(query);
key = this.decodeAndLower(key);
const params = new URLSearchParams(query);
params.delete(key);