Added support to set SOCIAL_AUTH_ALLOWED_REDIRECT_HOSTS

[rhysyngsun]

What are the relevant tickets?

Part of #420

Description (What does it do?)

Adds a setting for SOCIAL_AUTH_ALLOWED_REDIRECT_HOSTS to support allowing a redirect to OCW on login.

How can this be tested?

• Navigate to /login, it should forward you on to /login/ol-oidc and when you complete login you end up at the home page.
• Next try /login?next=http://ocw.odl.local, you should get redirected to /login/ol-oidc/?next=http://ocw.odl.local and then it should ignore the next parameter and redirect you to the home page.
• In your .env file, set SOCIAL_AUTH_ALLOWED_REDIRECT_HOSTS=["ocw.odl.local"]
• Now try /login?next=http://ocw.odl.local again, you should get redirected to /login/ol-oidc/?next=http://ocw.odl.local and then subsequently http://ocw.odl.local (doesn't matter that this doesn't exist).

[github-actions]

OpenAPI Changes

Show/hide No detectable change.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (4550651) 76.85% compared to head (d6233b3) 76.83%.
Report is 9 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #429      +/-   ##
==========================================
- Coverage   76.85%   76.83%   -0.02%     
==========================================
  Files         244      244              
  Lines        9975     9976       +1     
  Branches     1703     1703              
==========================================
- Hits         7666     7665       -1     
- Misses       2141     2142       +1     
- Partials      168      169       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[collinpreston]

Just wanted to check, but has this been tested to verify that the functionality added in #330 will still work?

[rhysyngsun]

@collinpreston yeah that'll still work, that code path wasn't touched

[gumaerc]

👍 LGTM!

I had some unrelated issues testing this that I detailed in this bug report: #445

After figuring that out and correcting the API URL in mit-open-login-button, I was able to append ?redirect_url=http://ocw.odl.local:3000/ to the login URL and everything worked great. I clicked login, followed the login process and was successfully redirected back to my local OCW page.