diff --git a/src/Azure/AzureAD/Authentication.AzureADB2C.UI/src/AzureAdB2COpenIDConnectEventHandlers.cs b/src/Azure/AzureAD/Authentication.AzureADB2C.UI/src/AzureAdB2COpenIDConnectEventHandlers.cs index 2a78868c02..d8d8b1c268 100644 --- a/src/Azure/AzureAD/Authentication.AzureADB2C.UI/src/AzureAdB2COpenIDConnectEventHandlers.cs +++ b/src/Azure/AzureAD/Authentication.AzureADB2C.UI/src/AzureAdB2COpenIDConnectEventHandlers.cs @@ -1,4 +1,4 @@ -// Copyright (c) .NET Foundation. All rights reserved. +// Copyright (c) .NET Foundation. All rights reserved. // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.using Microsoft.AspNetCore.Authorization; using System; @@ -65,7 +65,7 @@ namespace Microsoft.AspNetCore.Authentication.AzureADB2C.UI if (context.Failure is OpenIdConnectProtocolException && context.Failure.Message.Contains("AADB2C90118")) { // If the user clicked the reset password link, redirect to the reset password route - context.Response.Redirect($"/AzureADB2C/Account/ResetPassword/{SchemeName}"); + context.Response.Redirect($"{context.Request.PathBase}/AzureADB2C/Account/ResetPassword/{SchemeName}"); } // Access denied errors happen when a user cancels an action on the Azure Active Directory B2C UI. We just redirect back to // the main page in that case. @@ -75,11 +75,11 @@ namespace Microsoft.AspNetCore.Authentication.AzureADB2C.UI // ', error_uri: 'error_uri is null'. else if (context.Failure is OpenIdConnectProtocolException && context.Failure.Message.Contains("access_denied")) { - context.Response.Redirect("/"); + context.Response.Redirect($"{context.Request.PathBase}/"); } else { - context.Response.Redirect("/AzureADB2C/Account/Error"); + context.Response.Redirect($"{context.Request.PathBase}/AzureADB2C/Account/Error"); } return Task.CompletedTask;