Oauth issues with use_secure_urls=true

[alecpl]

Prerequisites

• I have searched for duplicate or closed issues
• I can recreate the issue with all plugins disabled

Describe the issue

If you enabled use_secure_urls the URL may contain a token prefix to the request base path. E.g. https://roundcube.test/index.php becomes https://roundcube.test/Vz2siuF3cr42OlPl/index.php.

Issues:

1. In rcmail_oauth::get_redirect_uri() we build a request url for oauth redirect. If current base path includes the token, the redirect url will contain it too. This will not work with oauth providers that do validate the url with registered client's url. We have to use a redirect url without the token.
2. After user returns from the redirect we should do the "secure redirect" (to a "tokenized url") the same as we do in index.php on successful logon.

What browser(s) are you seeing the problem on?

No response

What version of PHP are you using?

No response

What version of Roundcube are you using?

1.6.9 - master

JavaScript errors

No response

PHP errors

No response

[alecpl]

Fixed. Just a note that issue 2. didn't exist in master.