authgear / authgear/authgear-server

Reconsider necessity of having public origin redirects in POST apis

Open
#3,459 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2k
Forks
125
Avg merge
2d 17h
Merged PRs (30d)
32

Description

Some http clients, such as [https://api.flutter.dev/flutter/dart-io/HttpClientRequest/followRedirects.html]()
Will not follow redirects on POST requests.
Therefore returning 308 in POST apis may cause problems. If it is not necessary, lets remove it.

Contributor guide

Open the contributing guide

Research direction

Trace the public-origin redirect handling used by POST APIs and inspect how 308 responses are covered. Verify whether those redirects are required for the API flow; done means reaching an evidence-backed decision and updating the affected behavior and tests if removal is approved.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
api, backend
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.