From 9ae787f42b116a1a5d27afe94191f796a695b286 Mon Sep 17 00:00:00 2001
From: moonrailgun <moonrailgun@gmail.com>
Date: Sun, 2 Jul 2023 21:45:05 +0800
Subject: [PATCH] feat(iam): added a security policy that allows setting domain
 name verification for passing tokens

---
 server/plugins/com.msgbyte.iam/services/iam.service.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/server/plugins/com.msgbyte.iam/services/iam.service.ts b/server/plugins/com.msgbyte.iam/services/iam.service.ts
index 7ef4d680..ceb534f0 100644
--- a/server/plugins/com.msgbyte.iam/services/iam.service.ts
+++ b/server/plugins/com.msgbyte.iam/services/iam.service.ts
@@ -138,12 +138,14 @@ class IAMService extends TcService {
 }
 
 function generatePostMessageHtml(obj: Record<string, any>) {
+  const IAM_FE_URL = process.env.IAM_FE_URL || '*';
+
   return {
     __raw: true,
     html: `<script>window.opener.postMessage(${JSON.stringify({
       source: 'plugin:com.msgbyte.iam',
       ...obj,
-    })}, "*");</script><div>Waiting for close</div>`,
+    })}, "${IAM_FE_URL}");</script><div>Waiting for main window close</div>`,
   };
 }