Fix redirect params placement for hash-based route URLs

dist/common/processURL.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProcessURL = void 0;
 var query_string_1 = __importDefault(require("query-string"));
+var types_1 = require("./types");
 var logger_1 = require("./logger");
 var ProcessURL = /** @class */ (function () {
     function ProcessURL(request, debug) {
@@ -102,12 +103,10 @@ var ProcessURL = /** @class */ (function () {
     ProcessURL.prototype.processQueryString = function (queryString) {
         var processedQueryString;
         if (queryString) {
-            delete queryString["ch-code"];
-            delete queryString["ch-fresh"];
-            delete queryString["ch-id"];
-            delete queryString["ch-id-signature"];
-            delete queryString["ch-public-key"];
-            delete queryString["ch-requested"];
+            for (var _i = 0, CH_PARAM_KEYS_1 = types_1.CH_PARAM_KEYS; _i < CH_PARAM_KEYS_1.length; _i++) {
+                var key = CH_PARAM_KEYS_1[_i];
+                delete queryString[key];
+            }
         }
         //Convert to usable querystring format
         if (queryString && Object.keys(queryString).length !== 0) {

dist/common/types.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Modes = exports.RecordPerformanceOptions = exports.SessionStatusWrapper = exports.HttpErrorWrapper = exports.ValidateRequestObject = exports.ValidateRequestParams = exports.TokenObjectConstructor = exports.TokenObject = exports.ExtractTokenOptions = exports.SignatureSourceObject = exports.SignatureResponseObject = exports.SignatureObject = exports.RoomMetaObject = exports.LocalStorageOptions = exports.LocalStorageObject = exports.CookieObject = exports.RequestObject = exports.ProcessURLResultObject = exports.SessionRequestConfig = exports.SpecialParametersObject = exports.QueryObject = exports.GatekeeperKeyPair = exports.GatekeeperOptions = exports.RoomsConfig = exports.RoomConfig = void 0;
+exports.Modes = exports.RecordPerformanceOptions = exports.SessionStatusWrapper = exports.HttpErrorWrapper = exports.ValidateRequestObject = exports.ValidateRequestParams = exports.TokenObjectConstructor = exports.TokenObject = exports.ExtractTokenOptions = exports.SignatureSourceObject = exports.SignatureResponseObject = exports.SignatureObject = exports.RoomMetaObject = exports.LocalStorageOptions = exports.LocalStorageObject = exports.CookieObject = exports.RequestObject = exports.ProcessURLResultObject = exports.SessionRequestConfig = exports.SpecialParametersObject = exports.QueryObject = exports.CH_PARAM_KEYS = exports.GatekeeperKeyPair = exports.GatekeeperOptions = exports.RoomsConfig = exports.RoomConfig = void 0;
 var zod_1 = require("zod");
 // Lite Validator types
 exports.RoomConfig = zod_1.z.object({
@@ -32,6 +32,16 @@ exports.GatekeeperKeyPair = zod_1.z.object({
     publicKey: zod_1.z.string(),
     privateKey: zod_1.z.string().optional(),
 });
+// Centralised list of CrowdHandler query-string parameter keys.
+// Used wherever ch-* params need to be detected or stripped.
+exports.CH_PARAM_KEYS = [
+    'ch-code',
+    'ch-fresh',
+    'ch-id',
+    'ch-id-signature',
+    'ch-public-key',
+    'ch-requested',
+];
 exports.QueryObject = zod_1.z
     .object({
     "ch-code": zod_1.z.string().optional(),