Skip to content

Commit 26e6d3c

Browse files
chore(release): cut the 5.29.0 release
# [5.29.0](v5.28.1...v5.29.0) (2025-09-09) ### Features * **oauth2-redirect:** externalize inline script for CSP compliance ([#10559](#10559)) ([35eb103](35eb103))
1 parent e9b44b5 commit 26e6d3c

10 files changed

+11
-83
lines changed

dist/oauth2-redirect.html

Lines changed: 1 addition & 74 deletions
Original file line numberDiff line numberDiff line change
@@ -1,79 +1,6 @@
11
<!doctype html>
22
<html lang="en-US">
3-
<head>
4-
<title>Swagger UI: OAuth2 Redirect</title>
5-
</head>
63
<body>
7-
<script>
8-
'use strict';
9-
function run () {
10-
var oauth2 = window.opener.swaggerUIRedirectOauth2;
11-
var sentState = oauth2.state;
12-
var redirectUrl = oauth2.redirectUrl;
13-
var isValid, qp, arr;
14-
15-
if (/code|token|error/.test(window.location.hash)) {
16-
qp = window.location.hash.substring(1).replace('?', '&');
17-
} else {
18-
qp = location.search.substring(1);
19-
}
20-
21-
arr = qp.split("&");
22-
arr.forEach(function (v,i,_arr) { _arr[i] = '"' + v.replace('=', '":"') + '"';});
23-
qp = qp ? JSON.parse('{' + arr.join() + '}',
24-
function (key, value) {
25-
return key === "" ? value : decodeURIComponent(value);
26-
}
27-
) : {};
28-
29-
isValid = qp.state === sentState;
30-
31-
if ((
32-
oauth2.auth.schema.get("flow") === "accessCode" ||
33-
oauth2.auth.schema.get("flow") === "authorizationCode" ||
34-
oauth2.auth.schema.get("flow") === "authorization_code"
35-
) && !oauth2.auth.code) {
36-
if (!isValid) {
37-
oauth2.errCb({
38-
authId: oauth2.auth.name,
39-
source: "auth",
40-
level: "warning",
41-
message: "Authorization may be unsafe, passed state was changed in server. The passed state wasn't returned from auth server."
42-
});
43-
}
44-
45-
if (qp.code) {
46-
delete oauth2.state;
47-
oauth2.auth.code = qp.code;
48-
oauth2.callback({auth: oauth2.auth, redirectUrl: redirectUrl});
49-
} else {
50-
let oauthErrorMsg;
51-
if (qp.error) {
52-
oauthErrorMsg = "["+qp.error+"]: " +
53-
(qp.error_description ? qp.error_description+ ". " : "no accessCode received from the server. ") +
54-
(qp.error_uri ? "More info: "+qp.error_uri : "");
55-
}
56-
57-
oauth2.errCb({
58-
authId: oauth2.auth.name,
59-
source: "auth",
60-
level: "error",
61-
message: oauthErrorMsg || "[Authorization failed]: no accessCode received from the server."
62-
});
63-
}
64-
} else {
65-
oauth2.callback({auth: oauth2.auth, token: qp, isValid: isValid, redirectUrl: redirectUrl});
66-
}
67-
window.close();
68-
}
69-
70-
if (document.readyState !== 'loading') {
71-
run();
72-
} else {
73-
document.addEventListener('DOMContentLoaded', function () {
74-
run();
75-
});
76-
}
77-
</script>
784
</body>
795
</html>
6+
<script src="oauth2-redirect.js"></script>

dist/oauth2-redirect.js

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/swagger-ui-bundle.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/swagger-ui-es-bundle-core.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/swagger-ui-es-bundle.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/swagger-ui-standalone-preset.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/swagger-ui.css

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/swagger-ui.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock.json

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "swagger-ui",
3-
"version": "5.28.1",
3+
"version": "5.29.0",
44
"main": "./dist/swagger-ui.js",
55
"module": "./dist/swagger-ui-es-bundle-core.js",
66
"exports": {

0 commit comments

Comments
 (0)