4
4
//
5
5
// Created by Stephen Birarda on 2/18/2014.
6
6
// Copyright 2014 High Fidelity, Inc.
7
+ // Copyright 2023 Overte e.V.
7
8
//
8
9
// Distributed under the Apache License, Version 2.0.
9
10
// See the accompanying file LICENSE or http://www.apache.org/licenses/LICENSE-2.0.html
@@ -218,7 +219,7 @@ void AccountManager::setSessionID(const QUuid& sessionID) {
218
219
219
220
QNetworkRequest AccountManager::createRequest (QString path, AccountManagerAuth::Type authType) {
220
221
QNetworkRequest networkRequest;
221
- networkRequest.setAttribute (QNetworkRequest::FollowRedirectsAttribute, true );
222
+ networkRequest.setAttribute (QNetworkRequest::RedirectPolicyAttribute, QNetworkRequest::NoLessSafeRedirectPolicy );
222
223
networkRequest.setHeader (QNetworkRequest::UserAgentHeader, _userAgentGetter ());
223
224
224
225
networkRequest.setRawHeader (METAVERSE_SESSION_ID_HEADER,
@@ -563,7 +564,7 @@ void AccountManager::requestAccessToken(const QString& login, const QString& pas
563
564
QNetworkAccessManager& networkAccessManager = NetworkAccessManager::getInstance ();
564
565
565
566
QNetworkRequest request;
566
- request.setAttribute (QNetworkRequest::FollowRedirectsAttribute, true );
567
+ request.setAttribute (QNetworkRequest::RedirectPolicyAttribute, QNetworkRequest::NoLessSafeRedirectPolicy );
567
568
request.setHeader (QNetworkRequest::UserAgentHeader, _userAgentGetter ());
568
569
569
570
QUrl grantURL = _authURL;
@@ -586,7 +587,7 @@ void AccountManager::requestAccessTokenWithAuthCode(const QString& authCode, con
586
587
QNetworkAccessManager& networkAccessManager = NetworkAccessManager::getInstance ();
587
588
588
589
QNetworkRequest request;
589
- request.setAttribute (QNetworkRequest::FollowRedirectsAttribute, true );
590
+ request.setAttribute (QNetworkRequest::RedirectPolicyAttribute, QNetworkRequest::NoLessSafeRedirectPolicy );
590
591
request.setHeader (QNetworkRequest::UserAgentHeader, _userAgentGetter ());
591
592
592
593
QUrl grantURL = _authURL;
@@ -662,7 +663,7 @@ void AccountManager::refreshAccessToken() {
662
663
QNetworkAccessManager& networkAccessManager = NetworkAccessManager::getInstance ();
663
664
664
665
QNetworkRequest request;
665
- request.setAttribute (QNetworkRequest::FollowRedirectsAttribute, true );
666
+ request.setAttribute (QNetworkRequest::RedirectPolicyAttribute, QNetworkRequest::NoLessSafeRedirectPolicy );
666
667
request.setHeader (QNetworkRequest::UserAgentHeader, _userAgentGetter ());
667
668
668
669
QUrl grantURL = _authURL;
@@ -798,7 +799,7 @@ void AccountManager::requestProfile() {
798
799
profileURL.setPath (getMetaverseServerURLPath () + " /api/v1/user/profile" );
799
800
800
801
QNetworkRequest profileRequest (profileURL);
801
- profileRequest.setAttribute (QNetworkRequest::FollowRedirectsAttribute, true );
802
+ profileRequest.setAttribute (QNetworkRequest::RedirectPolicyAttribute, QNetworkRequest::NoLessSafeRedirectPolicy );
802
803
profileRequest.setHeader (QNetworkRequest::UserAgentHeader, _userAgentGetter ());
803
804
profileRequest.setRawHeader (ACCESS_TOKEN_AUTHORIZATION_HEADER, _accountInfo.getAccessToken ().authorizationHeaderValue ());
804
805
@@ -848,7 +849,7 @@ void AccountManager::requestAccountSettings() {
848
849
lockerURL.setPath (getMetaverseServerURLPath () + " /api/v1/user/locker" );
849
850
850
851
QNetworkRequest lockerRequest (lockerURL);
851
- lockerRequest.setAttribute (QNetworkRequest::FollowRedirectsAttribute, true );
852
+ lockerRequest.setAttribute (QNetworkRequest::RedirectPolicyAttribute, QNetworkRequest::NoLessSafeRedirectPolicy );
852
853
lockerRequest.setHeader (QNetworkRequest::UserAgentHeader, _userAgentGetter ());
853
854
lockerRequest.setRawHeader (ACCESS_TOKEN_AUTHORIZATION_HEADER, _accountInfo.getAccessToken ().authorizationHeaderValue ());
854
855
@@ -919,7 +920,7 @@ void AccountManager::postAccountSettings() {
919
920
lockerURL.setPath (getMetaverseServerURLPath () + " /api/v1/user/locker" );
920
921
921
922
QNetworkRequest lockerRequest (lockerURL);
922
- lockerRequest.setAttribute (QNetworkRequest::FollowRedirectsAttribute, true );
923
+ lockerRequest.setAttribute (QNetworkRequest::RedirectPolicyAttribute, QNetworkRequest::NoLessSafeRedirectPolicy );
923
924
lockerRequest.setHeader (QNetworkRequest::UserAgentHeader, _userAgentGetter ());
924
925
lockerRequest.setHeader (QNetworkRequest::ContentTypeHeader, " application/json" );
925
926
lockerRequest.setRawHeader (ACCESS_TOKEN_AUTHORIZATION_HEADER, _accountInfo.getAccessToken ().authorizationHeaderValue ());
0 commit comments