Open redirect concern

Hey! I'm implementing OAuth for Github following your guide found here:
https://supabase.com/docs/guides/auth/social-login/auth-github

I noticed that the auth callback flow has an open redirect here:
return NextResponse.redirect(`https://${forwardedHost}${next}`)


My security team has concerns about this and I was wondering what the need for this line is? Thanks!
Add GitHub OAuth to your Supabase project
Was this page helpful?