From 0bd862af55e209dcefe0d1bc38829c42444eef1d Mon Sep 17 00:00:00 2001 From: root Date: Tue, 1 Sep 2026 13:13:28 +0000 Subject: [PATCH] Banking-OAuth-Redirect ohne Backend-Pfad erzeugen --- backend/src/routes/banking.ts | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/backend/src/routes/banking.ts b/backend/src/routes/banking.ts index ce25ef0..95a3d32 100644 --- a/backend/src/routes/banking.ts +++ b/backend/src/routes/banking.ts @@ -997,7 +997,10 @@ export default async function bankingRoutes(server: FastifyInstance) { if (!tenantId) return reply.code(401).send({ error: "Unauthorized" }) - const redirect = new URL("/settings/banking", secrets.API_BASE_URL).toString() + // API_BASE_URL kann einen Reverse-Proxy-Pfad wie `/backend` enthalten. + // Der OAuth-Rücksprung muss aber auf die Frontend-Route zeigen und darf + // diesen Backend-Pfad nicht erneut enthalten. + const redirect = new URL("/settings/banking", new URL(secrets.API_BASE_URL).origin).toString() let data: any if (useCentralBanking) { data = await centralServicesClient.createBankingRequisition({ institutionId: institutionid, redirect, userLanguage: "de" })