withMiddlewareAuthRequired returnTo param should not be full URL

[zcarlson-gmgt]

Checklist

• The issue can be reproduced in the sample app (or N/A).
• I have looked into the README and have not found a suitable solution or answer.
• I have looked into the examples and have not found a suitable solution or answer.
• I have looked into the API documentation and have not found a suitable solution or answer.
• I have searched the issues and have not found a suitable solution or answer.
• I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• I agree to the terms within the Auth0 Code of Conduct.

Description

I have implemented withMiddlewareAuthRequired to protect our pages. The returnTo param that is added automatically as redirect when navigating to a protected page directly contains the full URL instead of a relative path to the page.

I expect a relative URL to be set as described in the docs:
"/api/auth/login: Your Next.js application redirects users to your identity provider for them to log in (you can optionally pass a returnTo parameter to return to a custom relative URL after login, for example /api/auth/login?returnTo=/profile)."

We host our app as a container and in that environment it still shows localhost as the domain instead of our custom domain. (ex. "/api/auth/login?returnTo=http://localhost:3000/profile")

Also, these docs could use some updates. This import does not work:
import { withMiddlewareAuthRequired } from '@auth0/nextjs-auth0/middleware';
But this does:
import { withMiddlewareAuthRequired } from '@auth0/nextjs-auth0/edge';

Reproduction

1. Sample repo: auth0-samples/auth0-nextjs-samples@main...zcarlson-gmgt:auth0-nextjs-samples:main

2. Implement middleware authentication using the following:
   import { withMiddlewareAuthRequired } from '@auth0/nextjs-auth0/edge'; export default withMiddlewareAuthRequired();

3. Navigate to a page that should be protected and isn't using page level protection (ex. localhost:3000/profile)

4. See that the returnTo param is set to localhost:3000/profile instead of /profile

SDK version

2.1.0

Next.js version

13.1

Node.js version

18.12.0

[adamjmcgrath]

Hi @zcarlson-gmgt - thanks for raising this

This is a good point, the ssr and csr withPageAuthRequired helpers both set a relative url for the returnTo parameter. Will investigate.

Also, these docs could use some updates. This import does not work:

This has been fixed in #1019 - will update on the next release, thanks for pointing that out though