From 3520b605bfa98b2b5c72f88a6633dac1f568cf80 Mon Sep 17 00:00:00 2001 From: Heath Stewart Date: Sat, 28 Feb 2026 00:25:29 -0800 Subject: [PATCH] Send referrer path and origin through login flow --- packages/cli/src/components/sequoia-subscribe.js | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/packages/cli/src/components/sequoia-subscribe.js b/packages/cli/src/components/sequoia-subscribe.js index fccaef6..3d32c04 100644 --- a/packages/cli/src/components/sequoia-subscribe.js +++ b/packages/cli/src/components/sequoia-subscribe.js @@ -258,14 +258,21 @@ class SequoiaSubscribe extends BaseElement { method: "POST", headers: { "Content-Type": "application/json" }, credentials: "include", + referrerPolicy: "no-referrer-when-downgrade", body: JSON.stringify({ publicationUri }), }); const data = await response.json(); if (response.status === 401 && data.authenticated === false) { - // Redirect to the hosted subscribe page to complete OAuth - window.location.href = data.subscribeUrl; + // Redirect to the hosted subscribe page to complete OAuth, + // passing the current page URL (without credentials) as returnTo. + const subscribeUrl = new URL(data.subscribeUrl); + const pageUrl = new URL(window.location.href); + pageUrl.username = ""; + pageUrl.password = ""; + subscribeUrl.searchParams.set("returnTo", pageUrl.toString()); + window.location.href = subscribeUrl.toString(); return; } -- 2.51.2