joindin/joind.in — pull request #496 by riverar (2012-05-15 08:59:51+00:00)
Title: JOINDIN-186 BUGFIX: Preserve referrer upon unauthenticated oauth request

When processing an OAUTH request, the user's authentication status is checked. If the user isn't authenticated, joind.in redirects the user to the login form. This redirect is performed using a META refresh (i.e. Refresh: 0;url=xxx in header) that isn't standard or consistent across browsers and ultimately leads to referrer information being lost. (This affects IE, Firefox, at least.)

In *this* case, I removed the 'refresh' flag so a normal 302 redirect is performed.

Note, however, this issue may be present elsewhere in the codebase. Suggest a review of all redirect calls. (Or perhaps if keeping referral information intact is important, remove the 'refresh' mechanism altogether.)