Merge pull request #442 from okta/follow_redirects_fix

rajdeepnanua-okta · web-flow · commit 73420cc814c5 · 2024-12-18T11:40:14.000-05:00
Don't follow redirects for OkHttp
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,6 @@
+# 2.17.0
+- Don't follow redirects for OkHttp. This fixes MFA issues when using classic Okta and session token login.
+
 # 2.16.0
 - Fix vulnerabilities and remove jsonpath-plus. Thanks to [vero1024](https://github.com/vero1024) for contribution in this release!
 
diff --git a/android/src/main/java/com/oktareactnative/HttpClientImpl.java b/android/src/main/java/com/oktareactnative/HttpClientImpl.java
@@ -62,6 +62,7 @@ protected Request buildRequest(Uri uri, ConnectionParameters param) {
             sOkHttpClient = new OkHttpClient.Builder()
                     .connectTimeout(connectTimeoutMs, TimeUnit.MILLISECONDS)
                     .readTimeout(readTimeoutMs, TimeUnit.MILLISECONDS)
+                    .followRedirects(false)
                     .build();
         }
         Request.Builder requestBuilder = new Request.Builder().url(uri.toString());

Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,7 @@ protected Request buildRequest(Uri uri, ConnectionParameters param) {`
`62`	`62`	`sOkHttpClient = new OkHttpClient.Builder()`
`63`	`63`	`.connectTimeout(connectTimeoutMs, TimeUnit.MILLISECONDS)`
`64`	`64`	`.readTimeout(readTimeoutMs, TimeUnit.MILLISECONDS)`
	`65`	`+ .followRedirects(false)`
`65`	`66`	`.build();`
`66`	`67`	`}`
`67`	`68`	`Request.Builder requestBuilder = new Request.Builder().url(uri.toString());`