OAuth重定向片段丢失后

Question

I have a web environment where I'm accessing my resources using fragments. (like foo.com/#/my_resource).

I'm trying to add authentication using OAuth 2 to my server. And I'm using Shiro framework with pac4j. The problem I have here is, after I log in to the provider, the browser loses my hash so I get redirected to foo.com/ instead of foo.com/#/my_resource.

Thought it might be a common problem. Are there any workarounds for this? Is this behavior expected?

Thanks!

Answer 1

If you submit a request to a URL with a fragment, the fragment is not sent to the server - it is a client-side only concept. So the server would be unable to redirect to a URL and include the original fragment.

Also, it's not quite clear from your question, but if what you mean is that you are using this as the redirect_uri parameter in an OAuth 2 request, the spec explicitly forbids the use of a fragment in the value .