login: OIDC login should bind to localhost (#109)

Co-authored-by: Luke Exton <[email protected]>
spacelift-io · Dec 20, 2022 · de83209 · de83209
1 parent ae87fda
commit de83209
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/cmd/profile/login_command.go b/internal/cmd/profile/login_command.go
@@ -226,7 +226,7 @@ func loginUsingWebBrowser(creds *session.StoredCredentials) error {
 	}
 
 	m := http.NewServeMux()
-	server := &http.Server{Addr: fmt.Sprintf(":%d", cliServerPort), Handler: m, ReadHeaderTimeout: 5 * time.Second}
+	server := &http.Server{Addr: fmt.Sprintf("localhost:%d", cliServerPort), Handler: m, ReadHeaderTimeout: 5 * time.Second}
 	m.HandleFunc("/", handler)
 
 	fmt.Printf("\nOpening browser to %s\n\n", browserURL)