API: Only check if scheme is https

2 files changed, 4 insertions, 31 deletions

diff --git a/internal/server/api.go b/internal/server/api.go
index 546c02a..99d6f72 100644
--- a/internal/server/api.go
+++ b/internal/server/api.go
@@ -27,18 +27,15 @@ func validateEndpoints(endpoints Endpoints) error {
 	if err != nil {
 		return errors.WrapPrefix(err, "failed to parse API token endpoint", 0)
 	}
+	if pAPI.Scheme != "https" {
+		return errors.Errorf("API scheme: '%v', is not equal to 'https'", pAPI.Scheme)
+	}
 	if pAPI.Scheme != pAuth.Scheme {
 		return errors.Errorf("API scheme: '%v', is not equal to authorization scheme: '%v'", pAPI.Scheme, pAuth.Scheme)
 	}
 	if pAPI.Scheme != pToken.Scheme {
 		return errors.Errorf("API scheme: '%v', is not equal to token scheme: '%v'", pAPI.Scheme, pToken.Scheme)
 	}
-	if pAPI.Host != pAuth.Host {
-		return errors.Errorf("API host: '%v', is not equal to authorization host: '%v'", pAPI.Host, pAuth.Host)
-	}
-	if pAPI.Host != pToken.Host {
-		return errors.Errorf("API host: '%v', is not equal to token host: '%v'", pAPI.Host, pToken.Host)
-	}
 	return nil
 }
 
diff --git a/internal/server/api_test.go b/internal/server/api_test.go
index b1e3550..07510b0 100644
--- a/internal/server/api_test.go
+++ b/internal/server/api_test.go
@@ -55,7 +55,7 @@ func Test_APIGetEndpoints(t *testing.T) {
 				Authorization: "https://example.com/2",
 				Token:         "https://example.com/3",
 			},
-			err: errors.New("API scheme: 'http', is not equal to authorization scheme: 'https'"),
+			err: errors.New("API scheme: 'http', is not equal to 'https'"),
 		},
 		{
 			epl: EndpointList{
@@ -65,30 +65,6 @@ func Test_APIGetEndpoints(t *testing.T) {
 			},
 			err: errors.New("API scheme: 'https', is not equal to token scheme: 'ftp'"),
 		},
-		{
-			epl: EndpointList{
-				API:           "https://malicious.com/1",
-				Authorization: "https://example.com/2",
-				Token:         "https://example.com/3",
-			},
-			err: errors.New("API host: 'malicious.com', is not equal to authorization host: 'example.com'"),
-		},
-		{
-			epl: EndpointList{
-				API:           "https://example.com/1",
-				Authorization: "https://example.com/2",
-				Token:         "https://malicious.com/3",
-			},
-			err: errors.New("API host: 'example.com', is not equal to token host: 'malicious.com'"),
-		},
-		{
-			epl: EndpointList{
-				API:           "https://example.com/1",
-				Authorization: "https://malicious.com/2",
-				Token:         "https://example.com/3",
-			},
-			err: errors.New("API host: 'example.com', is not equal to authorization host: 'malicious.com'"),
-		},
 	}
 
 	for _, tc := range testCases {