Query string gets stripped out when using the logged_in scheme.

[sunscreem]

Hi All,

When my users visit

https://mysite.com/someurl?token=1234

that page is protected using the usual logged_in scheme.

They therefore get redirect to:

https://mysite.com/loginpage?redirect=https://mysite.com/someurl

Note that the ?token=1234 has been stripped out.

Ideally I want them to be redirected to

https://mysite.com/loginpage?redirect=https://mysite.com/someurl?token=1234

Any ideas why this might be happening?

[jasonvarga]

Nice find. Yes, it's happening because we use request()->url() here where we should probably be using fullUrl()

cms/src/Auth/Protect/Protection.php

Lines 68 to 71 in d76a4b4

	protected function url()
	{
	return URL::tidy(request()->url());
	}

Can you make an issue instead?